--- title: "Update" method: POST path: "/api/v1/access_review_template/{id}" tags: ["Access Review Template"] --- # Update `POST /api/v1/access_review_template/{id}` Update modifies an existing access review template. Use the update_mask to specify which fields to change. ## Path parameters - `id` string, required — The unique identifier of this template. ## Request body - C1ApiAccessreviewV1AccessReviewTemplateServiceUpdateRequestInput — The AccessReviewTemplateServiceUpdateRequest message. - `accessReviewTemplate` C1ApiAccessreviewV1AccessReviewTemplate — A reusable template that defines the configuration for creating access review campaigns. Templates can optionally be scheduled to automatically create campaigns on a recurring basis. This message contains a oneof named slack_channel_details. Only a single field of the following list may be set at a time: - slackChannel - `accessReviewDuration` string, duration - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field. - `annotations` object — Key/value metadata. Up to 16 entries; keys 1-128 chars; values 0-256 chars; URL-safe ASCII. Keys starting with `c1/` are reserved. Updates have PATCH semantics: keys absent from the request are preserved; an empty value deletes the key. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`. - `autoCloseCampaign` boolean — Auto-close configuration start date and access_review_duration will be used to calculate the scheduled close date - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field. - `autoGenerateReport` boolean — auto generate report when campaign is closed - `autoStartCampaign` boolean — Auto-start configuration next_scheduled_campaign_at will be used as the scheduled start date - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list. - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used. - `createdAt` string, date-time - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — The defaultView field. - `deletedAt` string, date-time - `description` string — An optional description providing context about this template. - `displayName` string — The human-readable name of this template. - `exemptCertifiedAccessConflicts` boolean — The exemptCertifiedAccessConflicts field. - `id` string — The unique identifier of this template. - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `appUserTypes` string[], nullable — The appUserTypes field. - `managerIds` string[], nullable — The managerIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `noAccountOwners` boolean — The noAccountOwners field. - `userIds` string[], nullable — The userIds field. - `userStatuses` string[], nullable — The userStatuses field. - `isCampaignScheduleEnabled` boolean — Whether automatic campaign creation on the recurrence schedule is enabled. - `nextScheduledCampaignAt` string, date-time - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle. - `sendClose` boolean — Whether to send a notification when the campaign is closed. - `sendKickoff` boolean — Whether to send a notification when the campaign is started. - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks. - `occurrences` integer — The number of campaigns that have been created from this template. - `policyId` string — The ID of the default review policy applied to campaigns created from this template. - `recurrenceRule` C1ApiAccessreviewV1RecurrenceRule — The RecurrenceRule message. This message contains a oneof named end_condition. Only a single field of the following list may be set at a time: - endDate - occurrences - `endDate` string, date-time - `frequency` 'FREQUENCY_UNSPECIFIED' | 'FREQUENCY_NONE' | 'FREQUENCY_DAILY' | 'FREQUENCY_WEEKLY' | 'FREQUENCY_MONTHLY' | 'FREQUENCY_YEARLY' — The frequency field. - `interval` integer — The interval field. - `occurrences` integer, nullable — The occurrences field. This field is part of the `end_condition` oneof. See the documentation for `c1.api.accessreview.v1.RecurrenceRule` for more details. - `startDate` string, date-time - `reviewInstructions` string — The reviewInstructions field. - `scope` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message. - `expression` string — The expression field. - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message. - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field. - `accountTypes` string[], nullable — The accountTypes field. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `noAccountOwner` boolean — The noAccountOwner field. - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message. - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message. - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message. - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message. - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message. - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message. - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field. - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field. - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message. - `expression` string — The expression field. - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message. - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field. - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs - `daysSinceAdded` string, duration - `daysSinceLastUsed` string, duration - `daysSinceReviewed` string, duration - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message. - `endDate` string, date-time - `startDate` string, date-time - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field. - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field. - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message. - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message. - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message. - `userIds` string[], nullable — The userIds field. - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message. - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message. - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message. - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field. - `appId` string — The appId field. - `id` string — The id field. - `managerUserIds` string[], nullable — The managerUserIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `userStatus` string[], nullable — The userStatus field. - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — The scopeType field. - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions - `meaningOfSignature` string — The meaningOfSignature field. - `requireSignature` boolean — The requireSignature field. - `stepUpProviderId` string — The stepUpProviderId field. - `tspUrl` string — The tspUrl field. - `slackChannel` C1ApiAccessreviewV1SlackChannel, nullable — The SlackChannel message. - `description` string — The description field. - `name` string — The name field. - `updatedAt` string, date-time - `usePolicyOverride` boolean — The usePolicyOverride field. - `updateMask` string, nullable ## Response `200` Successful response - C1ApiAccessreviewV1AccessReviewTemplateServiceUpdateResponse — The AccessReviewTemplateServiceUpdateResponse message. - `accessReviewTemplate` C1ApiAccessreviewV1AccessReviewTemplate — A reusable template that defines the configuration for creating access review campaigns. Templates can optionally be scheduled to automatically create campaigns on a recurring basis. This message contains a oneof named slack_channel_details. Only a single field of the following list may be set at a time: - slackChannel - `accessReviewDuration` string, duration - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field. - `annotations` object — Key/value metadata. Up to 16 entries; keys 1-128 chars; values 0-256 chars; URL-safe ASCII. Keys starting with `c1/` are reserved. Updates have PATCH semantics: keys absent from the request are preserved; an empty value deletes the key. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`. - `autoCloseCampaign` boolean — Auto-close configuration start date and access_review_duration will be used to calculate the scheduled close date - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field. - `autoGenerateReport` boolean — auto generate report when campaign is closed - `autoStartCampaign` boolean — Auto-start configuration next_scheduled_campaign_at will be used as the scheduled start date - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list. - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used. - `createdAt` string, date-time - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — The defaultView field. - `deletedAt` string, date-time - `description` string — An optional description providing context about this template. - `displayName` string — The human-readable name of this template. - `exemptCertifiedAccessConflicts` boolean — The exemptCertifiedAccessConflicts field. - `id` string — The unique identifier of this template. - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `appUserTypes` string[], nullable — The appUserTypes field. - `managerIds` string[], nullable — The managerIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `noAccountOwners` boolean — The noAccountOwners field. - `userIds` string[], nullable — The userIds field. - `userStatuses` string[], nullable — The userStatuses field. - `isCampaignScheduleEnabled` boolean — Whether automatic campaign creation on the recurrence schedule is enabled. - `nextScheduledCampaignAt` string, date-time - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle. - `sendClose` boolean — Whether to send a notification when the campaign is closed. - `sendKickoff` boolean — Whether to send a notification when the campaign is started. - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks. - `occurrences` integer — The number of campaigns that have been created from this template. - `policyId` string — The ID of the default review policy applied to campaigns created from this template. - `recurrenceRule` C1ApiAccessreviewV1RecurrenceRule — The RecurrenceRule message. This message contains a oneof named end_condition. Only a single field of the following list may be set at a time: - endDate - occurrences - `endDate` string, date-time - `frequency` 'FREQUENCY_UNSPECIFIED' | 'FREQUENCY_NONE' | 'FREQUENCY_DAILY' | 'FREQUENCY_WEEKLY' | 'FREQUENCY_MONTHLY' | 'FREQUENCY_YEARLY' — The frequency field. - `interval` integer — The interval field. - `occurrences` integer, nullable — The occurrences field. This field is part of the `end_condition` oneof. See the documentation for `c1.api.accessreview.v1.RecurrenceRule` for more details. - `startDate` string, date-time - `reviewInstructions` string — The reviewInstructions field. - `scope` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message. - `expression` string — The expression field. - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message. - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field. - `accountTypes` string[], nullable — The accountTypes field. - `appUserStatuses` string[], nullable — The appUserStatuses field. - `noAccountOwner` boolean — The noAccountOwner field. - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message. - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message. - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message. - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message. - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message. - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message. - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field. - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field. - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message. - `expression` string — The expression field. - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message. - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field. - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs - `daysSinceAdded` string, duration - `daysSinceLastUsed` string, duration - `daysSinceReviewed` string, duration - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message. - `endDate` string, date-time - `startDate` string, date-time - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field. - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field. - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message. - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message. - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message. - `userIds` string[], nullable — The userIds field. - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message. - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message. - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message. - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field. - `appId` string — The appId field. - `id` string — The id field. - `managerUserIds` string[], nullable — The managerUserIds field. - `multiUserProfileAttributes` object — The multiUserProfileAttributes field. - `userStatus` string[], nullable — The userStatus field. - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — The scopeType field. - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions - `meaningOfSignature` string — The meaningOfSignature field. - `requireSignature` boolean — The requireSignature field. - `stepUpProviderId` string — The stepUpProviderId field. - `tspUrl` string — The tspUrl field. - `slackChannel` C1ApiAccessreviewV1SlackChannel, nullable — The SlackChannel message. - `description` string — The description field. - `name` string — The name field. - `updatedAt` string, date-time - `usePolicyOverride` boolean — The usePolicyOverride field. --- [API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)