Microsoft Graph · Schema

microsoft.graph.accessReviewInstanceDecisionItem

Azure ADCollaborationContactsDocumentsEmailGraphIdentityMicrosoftOffice 365PresentationsProductivitySpreadsheetsT1Tasks
View JSON Schema on GitHub

JSON Schema

microsoft-graph-microsoftgraphaccessreviewinstancedecisionitem-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItem",
  "title": "microsoft.graph.accessReviewInstanceDecisionItem",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "accessReviewInstanceDecisionItem",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "accessReviewId": {
          "type": "string",
          "description": "The identifier of the accessReviewInstance parent. Supports $select. Read-only."
        },
        "appliedBy": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.userIdentity"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The identifier of the user who applied the decision. Read-only."
        },
        "appliedDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The timestamp when the approval decision was applied.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't applied the decision or it was automatically applied. The DatetimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.  Supports $select. Read-only.",
          "format": "date-time",
          "nullable": true
        },
        "applyResult": {
          "type": "string",
          "description": "The result of applying the decision. Possible values: New, AppliedSuccessfully, AppliedWithUnknownFailure, AppliedSuccessfullyButObjectNotFound and ApplyNotSupported. Supports $select, $orderby, and $filter (eq only). Read-only.",
          "nullable": true
        },
        "decision": {
          "type": "string",
          "description": "Result of the review. Possible values: Approve, Deny, NotReviewed, or DontKnow. Supports $select, $orderby, and $filter (eq only).",
          "nullable": true
        },
        "justification": {
          "type": "string",
          "description": "Justification left by the reviewer when they made the decision.",
          "nullable": true
        },
        "principal": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.identity"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Every decision item in an access review represents a principal's access to a resource. This property represents details of the principal. For example, if a decision item represents access of User 'Bob' to Group 'Sales' - The principal is 'Bob' and the resource is 'Sales'. Principals can be of two types - userIdentity and servicePrincipalIdentity. Supports $select. Read-only."
        },
        "principalLink": {
          "type": "string",
          "description": "A link to the principal object. For example, https://graph.microsoft.com/v1.0/users/a6c7aecb-cbfd-4763-87ef-e91b4bd509d9. Read-only.",
          "nullable": true
        },
        "recommendation": {
          "type": "string",
          "description": "A system-generated recommendation for the approval decision based off last interactive sign-in to tenant. The value is Approve if the sign-in is fewer than 30 days after the start of review, Deny if the sign-in is greater than 30 days after, or NoInfoAvailable. Possible values: Approve, Deny, or NoInfoAvailable. Supports $select, $orderby, and $filter (eq only). Read-only.",
          "nullable": true
        },
        "resource": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.accessReviewInstanceDecisionItemResource"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Every decision item in an access review represents a principal's access to a resource. This property represents details of the resource. For example, if a decision item represents access of User 'Bob' to Group 'Sales' - The principal is Bob and the resource is 'Sales'. Resources can be of multiple types. See accessReviewInstanceDecisionItemResource. Read-only."
        },
        "resourceLink": {
          "type": "string",
          "description": "A link to the resource. For example, https://graph.microsoft.com/v1.0/servicePrincipals/c86300f3-8695-4320-9f6e-32a2555f5ff8. Supports $select. Read-only.",
          "nullable": true
        },
        "reviewedBy": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.userIdentity"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "The identifier of the reviewer.00000000-0000-0000-0000-000000000000 if the assigned reviewer hasn't reviewed. Supports $select. Read-only."
        },
        "reviewedDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The timestamp when the review decision occurred. Supports $select. Read-only.",
          "format": "date-time",
          "nullable": true
        },
        "insights": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.governanceInsight"
          },
          "description": "Insights are recommendations to reviewers on whether to approve or deny a decision. There can be multiple insights associated with an accessReviewInstanceDecisionItem.",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      }
    }
  ],
  "x-ms-discriminator-value": "#microsoft.graph.accessReviewInstanceDecisionItem"
}