Get accessReview (deprecated)
Namespace: microsoft.graph
Important
APIs under the /beta
version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.
Caution
This version of the access review API is deprecated and will stop returning data on May 19, 2023. Please use access reviews API.
In the Microsoft Entra access reviews feature, retrieve an accessReview object.
To retrieve the reviewers of the access review, use the list accessReview reviewers API. To retrieve the decisions of the access review, use the list accessReview decisions API, or the list my accessReview decisions API.
If this is a recurring access review, no decisions will be associated with the recurring access review series. Instead, use the instances
relationship of that series to retrieve an accessReview collection of the past, current, and future instances of the access review. Each past and current instance will have decisions.
This API is available in the following national cloud deployments.
Global service | US Government L4 | US Government L5 (DOD) | China operated by 21Vianet |
---|---|---|---|
✅ | ✅ | ✅ | ✅ |
Permissions
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
Permission type | Least privileged permissions | Higher privileged permissions |
---|---|---|
Delegated (work or school account) | AccessReview.Read.All | AccessReview.ReadWrite.Membership, AccessReview.ReadWrite.All |
Delegated (personal Microsoft account) | Not supported. | Not supported. |
Application | AccessReview.Read.All | AccessReview.ReadWrite.Membership |
In order to call this API, the signed in user must also be in a directory role that permits them to read an access review, or the user can be assigned as a reviewer on the access review. For more details, see the role and permission requirements for access reviews.
HTTP request
GET /accessReviews/{reviewId}
Request headers
Name | Type | Description |
---|---|---|
Authorization | string | Bearer {token}. Required. |
Request body
Don't supply a request body for this method.
Response
If successful, this method returns a 200 OK
response code and an accessReview object in the response body.
Example
Request
GET https://graph.microsoft.com/beta/accessReviews/2b83cc42-09db-46f6-8c6e-16fec466a82d
Response
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-type: application/json
{
"id": "2b83cc42-09db-46f6-8c6e-16fec466a82d",
"displayName": "review",
"startDateTime": "2017-11-14T01:14:54.89Z",
"endDateTime": "2017-12-14T01:14:54.89Z",
"status": "InProgress",
"businessFlowTemplateId": "6e4f3d20-c5c3-407f-9695-8460952bcc68",
"reviewerType": "self",
"description": "",
"reviewedEntity":{"id":"3b4f7e74-eb82-4120-9ff5-ba429c1ea6df","displayName":"Salesforce"},
"settings": {
"mailNotificationsEnabled": true,
"remindersEnabled": true,
"justificationRequiredOnApproval": true,
"autoReviewEnabled": false,
"activityDurationInDays": 30,
"autoApplyReviewResultsEnabled": false,
"accessRecommendationsEnabled": false,
"recurrenceSettings": {
"recurrenceType": "onetime",
"recurrenceEndType": "endBy",
"durationInDays": 0,
"recurrenceCount": 0
},
"autoReviewSettings": {
"notReviewedResult": "Deny"
}
}
}