Bulk request access on user behalf

Triggers an access request for each of the specified policies on behalf of the user identified by userEmail.

For each policy, the approval flow runs first, and its provisioning workflow runs once the request is approved.

For temporary access, a deprovisioning workflow runs automatically when the requested duration ends.

The user must be eligible for each policy (a member of its eligibility groups); a policy the user isn't eligible for is rejected.

Each policy is processed independently, so some may succeed while others are rejected.

  • Rate limit: 30 requests per minute

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required

Request access on behalf of this user

triggerIdAccessRequestPolicies
array of integers
required
length between 1 and 50
triggerIdAccessRequestPolicies*
string

The reason the user is requesting access to the app.

requestedAccessDuration
object

Requested access duration — how long the user should have access to the app.

  • Optional by default — omit it to request permanent access.
  • Required only when the policy allows temporary access exclusively (i.e. permanent access is disabled).
  • value above 99 is accepted only when it matches one of the policy's duration options; a custom duration is at most 99.
Responses

Language
Credentials
Header
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json