---
title: "Creates an access review"
method: POST
path: "/api/v1/AccessReviews"
tags: ["AccessReviews"]
---

# Creates an access review

`POST /api/v1/AccessReviews`

## Headers

- `X-API-SECRET` string, required — API Secret is used to verify the integrity of the request and authenticate the client. It should be included in all requests. This value must be kept confidential and should never be exposed in client-side code or public repositories.

## Request body

- CreateAccessReviewRequestV1 — Request to create a new access review
  - `name` string, required — Name of the new access review. It should be unique.
  - `description` string, nullable — Description of the access review.
  - `accessReviewType` 'WorkAppOwner' | 'Manager' | 'CurrentUser', required
  - `dueDate` string, date-time, required — Due date of the access review.
  - `workAppIds` string[], required — List of work apps included in the access review. If empty, all work apps will be included.
  - `createdByUserId` string, uuid, required — User that appears as creator of the request.

## Response `204`

No Content

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `409` — Conflict
- `422` — Unprocessable Content
- `500` — Internal Server Error

---

[API](https://skmtc.net/cakewalk/apis/cakewalk-open-api.md) · [All operations](https://skmtc.net/cakewalk/apis/cakewalk-open-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cakewalk/cakewalk-open-api/revisions/5728f183a29d/schema)