AccessCheckHit
No description
AccessCheck
An effective value, not a predicate result: compare selects certainty; callers compare the value.
AccessCoverage
No description
AccessExplanationEdge
No description
AccessExplanationHit
No description
AccessExplanationPath
No description
AccessExplanation
No description
AccessIndeterminate
No description
AccessRequestStats
No description
AccessSummaryPage
No description
AccessSummaryRow
No description
AccessTargetPageInfo
No description
AccessTargetPage
No description
AccessTarget
No description
AdminInvitationResult
No description
AdminInvitationStatus
No description
AlertSubjectRef
No description
Alert
No description
APIKeyCreated
No description
APIKey
No description
ApprovalApprover
No description
ApprovalFlow
No description
ApprovalGrantTiming
No description
ApprovalStage
No description
AssignedResourceActualState
No description
AssignedResourceConnection
No description
AssignedResourceDesiredState
No description
AssignedResourceGrantInventoryPage
No description
AssignedResourceGrantInventoryRow
Direct observed grants and current managed intent, combined before filtering and pagination.
AssignedResourceGrantPage
No description
AssignedResourceGrant
One current observed graph Grant on an assignment. kind, target, and normalized qualifiers
AssignedResource
No description
AssignmentGrantOptionConnection
No description
AssignmentGrantOption
One option of an admin Grant picker: a live node of the resource's access graph.
AuditEvent
A tenant audit-log entry. Append-only; never contains secrets.
AuthzMatrixGrant
No description
AuthzMatrixPermission
No description
AuthzMatrixRole
No description
AuthzMatrixRow
No description
AuthzMatrix
No description
BulkJobConnection
No description
BulkJobFailure
No description
BulkJob
No description
CampaignPreviewGrantTypeCounts
No description
CampaignPreviewResourceStat
No description
CampaignPreviewSampleRow
No description
CampaignPreviewStats
No description
CampaignPreview
No description
CampaignProgress
No description
ConnectorCustomOp
No description
CreateBulkJobResult
No description
CreateImportJobResult
No description
CustomActionDefinition
No description
CustomActionResultMessage
No description
CustomActionRoleRef
No description
CustomConnectorConnection
No description
CustomConnectorExport
The pack document (format 1) and the SHA-256 of its canonical form, provenance excluded. A fork exports flattened.
CustomConnectorForkBase
The version a fork stacks on, as it runs now. A draft follows its base: an Owlie major updates in
CustomConnectorForkUpstream
No description
CustomConnectorFork
What a fork changes on top of its base. Manifest changes are a JSON merge patch (RFC 7396): an array
CustomConnectorImportResult
No description
CustomConnectorIssue
One refusal. Codes are the pack validator's, the engine's definition rules', OWLIEOWNEDAUTH_CONFIG
CustomConnectorUpstreamConflict
No description
CustomConnectorVersion
No description
CustomConnector
No description
Debug
No description
DelegationInfo
No description
DeleteResult
No description
DenyConfig
No description
DenyEffectDelay
No description
DenyExceptResource
No description
DerivedStateAttributeDetail
No description
DerivedStateAttribute
No description
DerivedStateRule
No description
DirectReport
One person the caller manages — an on-behalf target for the request flow's "Requesting for" control.
EffectiveAccessHit
No description
EgressConfig
No description
EmergencyAccessConfig
No description
EmergencyIdentitySelection
No description
EmergencyIdentitySelector
No description
EntityDisplay
No description
ExecuteCustomActionResult
No description
ExecutionJournalEntryConnection
No description
ExecutionJournalEntry
No description
Exemption
No description
ExternalAccountCandidate
An account linked to the identity, in the resource's integration, that a grants-only assignment could bind.
File
No description
FunctionBuildError
No description
FunctionConnection
No description
FunctionExecutionConnection
No description
FunctionExecutionLogEntry
No description
FunctionExecution
No description
FunctionOwlieAccessRole
No description
FunctionPackageInstall
No description
Function
No description
GatewayEnrollment
No description
Gateway
No description
GitHubConnection
Safe tenant-facing status for an Owlie-managed GitHub App installation.
GrantBrowsePageInfo
No description
GrantInventoryTarget
No description
GrantKindFacet
No description
GrantKind
An installed connector definition for one native assignment shape. A Grant of this kind joins one
GrantPrerequisiteGrant
A Grant, or a step of its prerequisite chain.
GrantPrerequisiteHop
One step of a prerequisite chain, and the Grant that needs it.
GrantPrerequisitePath
A Grant's prerequisite chain, as the add, request and approval surfaces preview it.
GrantPrerequisiteTarget
No description
GrantQualifierDefinition
One normalized value in a GrantKind. Together, the kind, principal, target, and all qualifier values
GrantScopeFacet
No description
GrantTarget
No description
GraphAssignmentLink
No description
GraphNodeNeighborhood
No description
GraphNodeSearch
No description
GraphSnapshotEdge
No description
GraphSnapshotFacets
No description
GraphSnapshotIntegrationCount
No description
GraphSnapshotIntegration
No description
GraphSnapshotKindCount
No description
GraphSnapshotNodeRef
No description
GraphSnapshotNode
No description
GraphSnapshotStats
No description
GraphSnapshot
No description
GroupConnection
No description
GroupDisplay
No description
GroupHierarchyEdge
No description
GroupMemberWithPath
No description
GroupMember
No description
GroupMembershipRebuildStatus
No description
GroupPathSegment
No description
Group
No description
IdentityAccountsRelinkResult
No description
IdentityAttributeAllowedValue
No description
IdentityAttributeDefinition
No description
IdentityAttributeDistributionBucket
No description
IdentityAttributeDistribution
No description
IdentityAttributeResolutionCandidate
No description
IdentityAttributeResolutionPolicy
No description
IdentityBulkChangePreview
No description
IdentityBulkExcludedRow
No description
IdentityBulkPreviewGroup
No description
IdentityBulkPreviewRow
No description
IdentityBulkPreview
No description
IdentityChangelogConnection
No description
IdentityChangelogEntry
No description
IdentityChangelogEvent
No description
IdentityConnection
No description
IdentityDisplay
No description
IdentityEvaluation
No description
IdentityImportConfig
The configuration an import ran, or would run, with.
IdentityImportHeldValue
Values the import writes that another assertion holds, by what holds them.
IdentityImportLimitOutcome
No description
IdentityImportManagerPrediction
No description
IdentityImportManager
No description
IdentityImportMapping
One attribute an import sets: from a column (column set) or from an OXL expression (expression set).
IdentityImportMatchRule
No description
IdentityImportPreviewCounts
No description
IdentityImportPreview
What a whole-file dry run predicts an import would do. Nothing is written.
IdentityImportReplacedValue
Imported values the source of this catalog key would take back at its next sync.
IdentityInvolvementManagement
No description
IdentityInvolvementProvisioning
No description
IdentityInvolvementRequests
No description
IdentityInvolvementResources
No description
IdentityInvolvementSettings
No description
IdentityInvolvementTickets
No description
IdentityInvolvement
No description
IdentityRemovalCheck
Whether removing an identity would be refused. message is the text a refused removal carries.
IdentitySelectionCounts
No description
IdentitySelectorCount
No description
IdentityStats
No description
Identity
No description
IdpAuditEventConnection
No description
IdpAuditEvent
No description
IdpClientConnection
No description
IdpClientSecretRotationPayload
No description
IdpClientSecret
No description
IdpClient
No description
IdpSigningKeyRotationResult
No description
IdpSigningKey
No description
ImportIssueCount
How many times one reason occurred over the whole file.
ImportIssue
One sample of a row problem. It names the row, the column and the attribute, never a cell value.
ImportJobConnection
No description
ImportJobCounts
No description
ImportJob
No description
InAppNotificationMessageConnection
No description
InAppNotificationMessage
No description
IntegrationCatalogEntitySyncFetchOption
No description
IntegrationCatalogEntitySyncFetchOptions
No description
IntegrationCatalogEntitySyncSupport
No description
IntegrationCatalogEntity
No description
IntegrationCatalogItem
No description
IntegrationConnection
No description
IntegrationDeletionProgress
Revoke-first uninstall progress for an integration in the deleting state. remaining is the count
IntegrationFlatFileColumn
One column of a flat-file feed, in position order.
IntegrationFlatFileFeed
A feed a flat-file integration ingests: its connector's definition, with this integration's own columns and file pattern.
IntegrationLinkedResource
No description
IntegrationTestResult
No description
IntegrationValueChange
One change to an install-editable value: Owlie's (or the connector author's) previous and new seed,
Integration
No description
Justification
No description
LifecycleAttributeChange
No description
LifecycleChange
No description
LifecycleDecisionCounts
No description
LifecycleEdge
No description
LifecycleLeaverResource
No description
LifecycleLeaverResources
No description
LifecyclePolicyTryOn
No description
LifecycleRuleEvaluation
No description
LifecycleSimulationEdge
No description
LifecycleSimulation
No description
LifecycleStateNow
No description
LifecycleStatePage
No description
LifecycleState
No description
LifecycleStates
No description
LifecycleStepResult
No description
LifecycleStep
No description
LifecycleTerminatedAccessHealth
No description
LifecycleTerminatedAccessIdentity
No description
LifecycleTimelineEntry
No description
LifecycleTimelineSource
No description
LifecycleTransitionPage
No description
LifecycleTransition
No description
LoginEmailProposal
No description
ManagedGrantPage
No description
ManagedGrantPendingOperation
No description
ManagedGrantSupport
No description
ManagedGrantTarget
No description
ManagedGrant
A durable lifecycle record for one managed Grant identity. status distinguishes pending or current
ManagerFallbackError
No description
ManagerFallbackGroup
No description
ManagerFallbackUser
No description
MonthlyActivityEntry
No description
MyAccessActions
No description
MyAccessAssignment
No description
MyAccessCoverage
No description
MyAccessDirectGrant
A Grant held directly by the caller's account; observed distinguishes provider evidence from desired-only state.
MyAccessInheritedGrant
Read-only effective access inherited through membership, with the holder path and structural coverage.
MyAccessLifecycle
No description
MyAccessProjection
No description
MyAccessTarget
No description
MyAccessWaitingItem
No description
MyAccessWindow
No description
MyReviewCampaignSummary
No description
MySecuritySettings
No description
MyStats
No description
NewRequest
No description
NotificationPolicy
No description
PageInfo
No description
PasswordChangeTarget
No description
PasswordChange
A password change the caller made, with one result per account it was meant for. reason is a
PasswordLinkAccount
No description
PasswordLink
Whether the tenant propagates password changes (auth.passwordPropagation), and the caller's
PasswordRequirements
What a new password must meet: the strictest of Owlie's rules (when the change writes the Owlie
PasswordRules
The tenant's password rules, held for both kinds of Owlie password wherever one is chosen: the server
PolicyBreakerCancelResult
No description
PolicyBreakerPreviewEntry
No description
PolicyBreakerPreviewItem
No description
PolicyBreakerPreview
No description
PolicyBreakerResumeResult
No description
PolicyBreakerStatus
No description
PolicyDeletionPreview
No description
PolicyDenyReview
No description
PolicyEffectGrant
A desired Grant reference on a policy effect. Policy evaluation selects account principals only;
PolicyEffect
No description
PolicyExceptionDeny
No description
PolicyExceptionInfo
No description
PolicyRolloutFailureReason
No description
PolicyRolloutRetryResult
No description
PolicyRolloutUnresolvedChange
No description
PolicyRollout
No description
PolicyVersion
No description
PolicyWave
No description
Policy
No description
ProvisioningItemResult
No description
ProvisioningOperationConnection
No description
ProvisioningOperation
No description
PublishCustomConnectorVersionResult
No description
ReactionConnection
No description
ReactionExecutionConnection
No description
ReactionExecution
No description
ReactionOncePer
No description
Reaction
No description
ReconcileIntegrationManifestResourceChange
No description
ReconcileIntegrationManifestResult
No description
RemindResult
No description
RequestConnection
No description
RequestEvent
No description
RequestItemPreview
The dry-run outcome for one requested resource: the approval it would need, the approvers that
RequestItemState
No description
RequestLensTeammate
A peer who shares the beneficiary's direct manager, with requestable resources the beneficiary lacks.
RequestLenses
The three beneficiary-aware discovery lenses beside the full request catalog.
RequestPreviewApprover
One approver a preview stage resolves to. type is the configured approver kind
RequestPreviewPolicyVerdict
One policy verdict the request gate would reach. level is the verdict severity (for example
RequestPreviewStage
One approval stage the request would walk, in configured order. policy is the stage decision rule
RequestPreview
No description
RequestResourceConnection
No description
RequestResource
No description
RequestStats
No description
Request
No description
RequestableCatalogResult
What a requester can ask for: a page of matching resources plus, when searching, the individual
RequestableGrantConnection
A cursor page of requester-visible Grants.
RequestableGrantHit
One Grant target a requestableCatalog search matched, together with the resource it is requested
RequestableGrant
One selectable Grant target offered by a Grant target-picker form element. Lean,
RequestableResourceConnection
A page of requestable resources. Same shape and cursor contract as ResourceConnection; kept
RequestedGrant
One Grant target recorded on a requested resource: its GrantKind, target external id, resolved
ResolveSyncPendingAdoptionResult
No description
ResolveSyncUnmatchedAccountResult
No description
ResourceAccessConfig
No description
ResourceAccessWindowPolicy
No description
ResourceAdoptionVerificationRule
Pre-flight adoption verification rule — an existing target account's accountattribute must equal mustmatch (OXL over the identity) before adoption.
ResourceApprovalStep
No description
ResourceComponentGrant
No description
ResourceComponent
No description
ResourceConnection
No description
ResourceDisplay
No description
ResourceGrantConnection
No description
ResourceGrantKind
No description
ResourceGrantTargetConnection
No description
ResourceGrantTarget
No description
ResourceGrantTargetsPolicy
No description
ResourceGrant
One identity's current (non-revoked) assignment to a resource — a "who has access to resource X" row.
ResourcePasswordBlock
The account's password. When Owlie creates the account it generates a random password of
ResourcePasswordPolicy
The target's own password rules.
ResourcePrerequisitesPolicy
Whether adding a Grant also adds every missing step of its declared prerequisite chain (an
ResourceProvisioningBaseline
No description
ResourceProvisioningHookStep
No description
ResourceProvisioningOperationHooks
No description
ResourceProvisioningOperationProvision
No description
ResourceProvisioningOperationRevoke
No description
ResourceProvisioningOperations
No description
ResourceProvisioningProfile
No description
ResourceSelfExtensionConfig
No description
ResourceStats
No description
ResourceSyncCadence
No description
ResourceSyncMatch
No description
ResourceSyncProfile
No description
ResourceSyncRead
No description
ResourceUtilization
No description
ResourceValidationIssue
No description
ResourceValidationResult
No description
Resource
No description
RetryAssignedResourcePayload
No description
RetryFailedGrantsByIntegrationPayload
No description
RetryFailedGrantsPayload
No description
RetryFailedGrantsSkip
No description
ReviewCampaignConnection
No description
ReviewCampaignDefinitionConnection
No description
ReviewCampaignDefinitionRef
Lightweight definition ref on an instance ({ id, name, archived }) — resolves even for archived definitions.
ReviewCampaignDefinition
Reusable campaign TEMPLATE. Mutable — no freeze; editing a definition affects
ReviewCampaignExport
One requested campaign evidence export (an NDJSON file built by a background job).
ReviewCampaignScheduleEvery
No description
ReviewCampaignSchedule
Definition recurrence: run every { count × unit } from the anchor, in the given mode.
ReviewCampaign
No description
ReviewCoveredTarget
No description
ReviewDecisionResult
No description
ReviewEvent
No description
ReviewGrantCoverage
No description
ReviewGrantIdentity
No description
ReviewGrantInherited
A read-only explanation of how an account inherits an observed Grant; not a separately writable Grant.
ReviewGrantManaged
No description
ReviewGrantProvenance
Evidence for an observed Grant. source and observed_at describe the provider observation;
ReviewGrantRef
No description
ReviewGrantSupport
No description
ReviewGrantTarget
No description
ReviewGraphPrincipal
No description
ReviewItemCampaignRef
No description
ReviewItemConnection
No description
ReviewItem
No description
ReviewMembershipSource
Qualifying membership captured with the immutable review evidence; downstream permission edges are never remediation targets.
ReviewPolicyDryRunAccess
No description
ReviewPolicyDryRunReviewer
No description
ReviewPolicyDryRunStage
No description
ReviewPolicyDryRun
No description
ReviewQueueItem
No description
ReviewRemediationSimulationCounts
Mode buckets (automatic+manual+disabled) and route buckets
ReviewRemediationSimulationSample
No description
ReviewRemediationSimulation
No description
ReviewResourceRef
No description
ReviewSourceAddressed
Write-once evidence that the re-applying source (policy/workflow/scheduled) of a reapplicable grant was addressed (markReviewItemSourceAddressed). The ReviewItem field is null until recorded.
ReviewStepReviewer
No description
ReviewStep
No description
ReviewSubject
No description
ReviewableGrantTarget
One pickable Grant target for the campaign-scope Grant targets axis.
ReviewerGrantProvenance
Reviewer justification classes only; lifecycle and support references remain admin evidence.
ReviewerGrantSupport
No description
ReviewerLoadPreviewRow
No description
ReviewerLoadPreview
No description
ReviewerLoadResourcePreviewRow
No description
ReviewerTaskConnection
No description
ReviewerTaskDelegatedFor
No description
ReviewerTaskStageStatus
No description
ReviewerTaskStep
No description
ReviewerTask
Reviewer-facing projection of a ReviewItem. Carries ONLY the caller's own
RoleConnection
No description
RoleMember
No description
Role
No description
Setting
No description
SettingsObject
No description
SlackIdentityLinkPreview
No description
SodActivationWave
No description
SodConstraintViolations
No description
SodConstraint
No description
SodGrantRef
No description
SodSide
No description
SodViolation
No description
SsoLink
No description
StatGroup
No description
StatusResult
No description
SyncJobConnection
No description
SyncJobRunConnection
No description
SyncJobRun
No description
SyncJob
No description
SyncPendingAdoption
A parked adopt-with-review item — an observed account matched an identity but has no managed assignment, awaiting an admin decision.
SyncRunHistoryCheckpoint
No description
SyncRunHistoryDetail
No description
SyncRunHistoryJournalEntry
No description
SyncRunHistoryPayloadChunk
No description
SyncRunHistoryPhase
No description
SyncRunHistoryRun
No description
SyncRunHistorySliceStat
No description
SyncRunHistorySummary
No description
SyncRunIdentityOutcomeCounts
No description
SyncRunOutcomeCounts
No description
SyncRunRecordDetailConnection
No description
SyncRunRecordDetail
No description
SyncRunResourceOutcomeCounts
No description
SyncSchedule
No description
SyncUnmatchedAccount
No description
SystemConnectorSource
An Owlie (system) connector major as its source: what a fork of it starts from.
TenantConnection
No description
TenantCounts
No description
TenantUsageEntry
No description
TenantUsageHistoryPoint
No description
Tenant
No description
TicketConnection
No description
TicketStats
No description
Ticket
No description
UploadTicket
No description
Version
No description
ViewerLoginMethod
No description
ViewerMfaMethod
No description
WaveAdoption
No description
WaveContinuation
No description
WaveDriftTotals
No description
WaveDrift
No description
WavePreviewSample
No description
WavePreview
No description
WaveTotals
No description