accessRequestStats
No description
adminInvitationStatuses
No description
alertOpenCount
No description
alerts
No description
apiKey
No description
apiKeys
No description
assignedResourceGrants
Live Grants for an assignment. Set reviewable to apply review exclusions. Requires review.item.read; missing or foreign assignments return an empty list.
assignedResource
No description
assignmentGrantQualifierOptions
Values an admin may choose for one entity_ref qualifier of kind: live nodes of the qualifier's
assignmentGrantTargets
Targets an admin may add as a Grant of kind, a writable GrantKind of the resource: live targets
auditEvents
Tenant audit log, most-recent-first. Requires the audit.read permission.
authzMatrix
No description
bulkJob
No description
bulkJobs
No description
companionGrantOffers
Companion Grant offers: offered kinds of the resource that target the entity of one entity_ref qualifier value, minus those the beneficiary already holds on that node; one entry per kind, value = the node's external id, label = its display name.
customActionDefinition
No description
customActionDefinitions
No description
customConnectorByKey
No description
customConnectorExport
Exports the draft when version is null, else that version_number.
customConnectorVersion
No description
customConnector
No description
customConnectors
Get custom connectors using cursor-based pagination
debug
No description
denyReviews
No description
derivedStateAttribute
No description
derivedStateAttributes
No description
directRequestableGrantsPage
Cursor-paginated form of directRequestableGrants for interactive pickers.
directRequestableGrants
Grants offered by the New Request flow's direct-Grant target picker. It has
dryRunReviewPolicy
Simulate the effective review policy for one grant: full layer compilation + reviewer
effectiveLimits
No description
exemptions
No description
gateway
No description
gateways
No description
getFunctionExecutions
No description
getFunctionVersionExecutions
No description
getFunction
No description
getFunctions
No description
getWidgets
No description
grantPrerequisitePaths
The prerequisite chain of each Grant in grants, in the order given: the access each needs first,
graphNodeNeighborhood
No description
graphNodeSearch
No description
group
Get a single group by ID
groups
Get groups using cursor-based pagination
identities
No description
identityAttributeCatalog
No description
identityAttributeDefaultResolutionPolicy
No description
identityAttributeDistribution
No description
identityEvaluationHistory
No description
identityJustifications
No description
identityLifecycleStateOptions
No description
identityRemovalCheck
Whether a removal would be refused, and why.
identityStats
No description
identity
No description
idpAuditEvents
No description
idpClientSecrets
No description
idpClient
No description
idpClients
No description
idpSigningKeys
No description
importJob
No description
importJobs
No description
inFlightProvisioningOperations
No description
integrationCatalog
No description
integration
No description
integrationsConnection
No description
invokableActions
No description
invokableConnectorOps
No description
isGroupMember
Returns true if the provided subject is a member of the target group
lifecycleChanges
No description
lifecycleLeaverResources
No description
lifecyclePolicyTryOn
No description
lifecycleSimulation
No description
lifecycleStatePage
No description
lifecycleStates
No description
lifecycleTerminatedAccessHealth
No description
lifecycleTransitions
No description
lifecycleUnplaced
No description
listRoles
No description
monthlyActivity
No description
myAccess
The caller's own access, lifecycle and scheduled items. No beneficiary argument.
myClaimedTickets
No description
myDirectReports
The caller's direct reports: ACTIVE identities whose manager is the caller. Self-scoped by
myInAppNotifications
No description
myProfileAttributeCatalog
No description
myProfile
No description
myRequests
No description
myReviewItems
No description
mySecuritySettings
No description
myStats
No description
myTickets
No description
myUnreadInAppNotificationCount
No description
notificationPolicies
No description
passwordChange
No description
passwordRequirements
No description
policies
No description
policyBreakerPreview
No description
policyBreakerStatus
No description
policyExceptionApprovals
No description
policyRollout
No description
policyVersions
No description
policyWaves
No description
policy
No description
previewPolicyDeletion
No description
previewRequest
Dry-run a request before submitting it (New Request flow): per requested resource, the approval it
previewReviewerLoad
No description
provisioningOperation
No description
qualifierOptions
Live nodes a requester may choose as the value of one entity_ref qualifier of one offered kind.
reactionExecutions
No description
reaction
No description
reactions
No description
requestLenses
Beneficiary-aware request discovery in one read: current requestable access, the five most assigned
requestStats
No description
request
No description
requestableCatalog
The catalog a requester browses in the New Request flow: enabled resources, cursor-paginated by
requestableGrants
The Grant target catalog offered to a requester by a Grant target-picker form
requests
No description
resolveEntityDisplay
No description
resourceAssignments
Paginated active assignments for a resource. Revoked, orphaned, and task rows are excluded.
resourceGrantTargets
Get Grants for a resource and GrantKind name, resolved to its target entity kinds.
resourceGrants
Identities currently assigned to a resource (who has access). Non-revoked assignments only.
resourceProvisioningFormFieldRefs
Form field names (form_definition keys) referenced by this resource's provisioning
resourceStats
No description
resource
Get a single resource by ID
resources
Get resources using cursor-based pagination
reviewCampaignDefinition
No description
reviewCampaignDefinitions
No description
reviewCampaignExports
The campaign's evidence exports, newest first (status, file ref, requested_by/at). Gated review.campaign.read.
reviewCampaignPreview
No description
reviewCampaignProgress
No description
reviewCampaign
No description
reviewCampaigns
No description
reviewItemEvidence
The item's deterministic evidence packet (versioned JSON envelope: item core +
reviewItem
No description
reviewItems
No description
reviewQueue
No description
reviewableGrantTargetKinds
Declared target entity kinds for a resource's reviewable Grant directory, including non-writable access.
reviewableGrantTargets
Grant target picker/search, gated review.campaign.manage. Resource and target entity kind narrow the directory before pagination; ids hydrate saved graph-node UUIDs.
role
No description
roles
No description
settings
Get settings for the current tenant. settings.read includes non-secret provider
setupFeed
No description
setupResourcePage
No description
simulateReviewRemediation
No description
slackIdentityLinkPreview
No description
sodConstraintDenies
No description
sodConstraint
No description
sodConstraints
No description
sodViolations
No description
syncJobHistoryRuns
No description
syncJobRun
No description
syncJobRuns
No description
syncJob
No description
syncJobsConnection
Paginated list of sync jobs. integrationId is a convenience parameter that,
syncPendingAdoptions
The sync adopt-with-review queue. Defaults to PENDING items.
syncRunHistory
No description
syncUnmatchedAccounts
Observed accounts that could not be matched to an Owlie identity.
systemConnectorSource
An Owlie connector's source, read only ("View source"): the major version, or the highest live
tenantCounts
No description
tenantGraph
No description
tenantUsageHistory
No description
tenantUsage
No description
tenant
Get a single tenant by ID or subdomain
tenants
Get tenants using cursor-based pagination
ticketStats
No description
ticket
No description
ticketsByRequest
No description
tickets
No description
validateResourceCreate
Validate a complete resource-create payload without creating anything. Returns
validateResource
Validate resource configuration and dependencies.