---
title: "Update"
method: POST
path: "/api/v1/access_review/{id}"
tags: ["Access Review"]
---

# Update

`POST /api/v1/access_review/{id}`

Update modifies an existing access review campaign. Use the update_mask to specify which fields to change.

## Path parameters

- `id` string, required — The unique identifier of this access review campaign.

## Request body

- C1ApiAccessreviewV1AccessReviewServiceUpdateRequestInput — The AccessReviewServiceUpdateRequest message.
  - `accessReview` C1ApiAccessreviewV1AccessReview — An access review campaign (also called a certification campaign) that verifies whether users still need their access entitlements. This message contains a oneof named setup_metadata. Only a single field of the following list may be set at a time: - singleApp - multiApp - bindings
    - `accessReviewTemplateId` string — The ID of the template if the campaign was created from one
    - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field.
    - `autoCloseCampaign` boolean — Auto-close configuration completion_date is used as the scheduled close date
    - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field.
    - `autoGenerateReport` boolean — The autoGenerateReport field.
    - `autoResolve` boolean — When true, selections are automatically resolved if the entitlement grant no longer exists.
    - `autoStartCampaign` boolean — Auto-start configuration
    - `bindings` C1ApiAccessreviewV1BindingObjectSetup, nullable — The BindingObjectSetup message.
    - `campaignHealth` C1ApiAccessreviewV1CampaignHealthSnapshot — Campaign health snapshot. Read-only; updated by backend maintenance processors.
      - `checkedAt` string, date-time
      - `phantomLockedCount` integer — Number of pending actions locked by terminal (dead) submissions.
    - `campaignInsights` C1ApiAccessreviewV1CampaignInsights — AI-generated campaign insights (markdown). Read-only; set by backend when campaign is closed.
      - `markdown` string — The markdown field.
    - `closedAt` string, date-time
    - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list.
      - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used.
    - `completionDate` string, date-time
    - `connectorSourcesFrozenAt` string, date-time
    - `createdAt` string, date-time
    - `createdById` string — The ID of the user who created this campaign.
    - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — the default view that reviewers will see when they complete their access reviews
    - `description` string — An optional description providing context about this campaign.
    - `displayName` string — The human-readable name of this campaign.
    - `errorState` 'ACCESS_REVIEW_ERROR_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_ERROR_STATE_SELECTION_QUOTA_EXCEED_ERROR' — Error state set when a prepare action fails with a recoverable condition. Cleared when the campaign scope is changed.
    - `exclusionScope` C1ApiAccessreviewV1AccessReviewExclusionScope — The AccessReviewExclusionScope message.
      - `appUserStatuses` string[], nullable — The appUserStatuses field.
      - `appUserTypes` string[], nullable — The appUserTypes field.
    - `exemptCertifiedAccessConflicts` boolean — this setting is used for access conflict type scope
    - `expectedTicketCount` integer — The estimated number of review tasks that will be generated when the campaign starts.
    - `hasAccuracySupport` boolean — Whether the connectors in this campaign support accuracy checking.
    - `id` string — The unique identifier of this access review campaign.
    - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message.
      - `appUserStatuses` string[], nullable — The appUserStatuses field.
      - `appUserTypes` string[], nullable — The appUserTypes field.
      - `managerIds` string[], nullable — The managerIds field.
      - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
      - `noAccountOwners` boolean — The noAccountOwners field.
      - `userIds` string[], nullable — The userIds field.
      - `userStatuses` string[], nullable — The userStatuses field.
    - `multiApp` C1ApiAccessreviewV1MultiAppSetup, nullable — The MultiAppSetup message.
      - `appEntitlementDetails` object — The appEntitlementDetails field.
      - `appEntitlements` object — The appEntitlements field.
    - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle.
      - `sendClose` boolean — Whether to send a notification when the campaign is closed.
      - `sendKickoff` boolean — Whether to send a notification when the campaign is started.
      - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks.
    - `policyId` string — The ID of the review policy that governs how review tasks are assigned and resolved.
    - `reviewInstructions` string — Optional instructions displayed to reviewers when completing their review tasks.
    - `scheduledStartDate` string, date-time
    - `scope` C1ApiAccessreviewV1AccessReviewScope — The AccessReviewScope message.
      - `appUserStatuses` string[], nullable — The appUserStatuses field.
      - `appUserTypes` string[], nullable — The appUserTypes field.
    - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — this sets the scope type for the access review
    - `scopeV2` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection
      - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
        - `expression` string — The expression field.
      - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message.
        - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field.
        - `accountTypes` string[], nullable — The accountTypes field.
        - `appUserStatuses` string[], nullable — The appUserStatuses field.
        - `noAccountOwner` boolean — The noAccountOwner field.
      - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message.
      - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message.
      - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message.
      - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message.
      - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message.
      - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message.
        - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field.
        - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field.
      - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
        - `expression` string — The expression field.
      - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween
        - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message.
          - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs
          - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field.
          - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs
        - `daysSinceAdded` string, duration
        - `daysSinceLastUsed` string, duration
        - `daysSinceReviewed` string, duration
        - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message.
          - `endDate` string, date-time
          - `startDate` string, date-time
        - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field.
        - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field.
      - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message.
      - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message.
      - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message.
        - `userIds` string[], nullable — The userIds field.
      - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message.
      - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message.
      - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message.
        - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field.
          - `appId` string — The appId field.
          - `id` string — The id field.
        - `managerUserIds` string[], nullable — The managerUserIds field.
        - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
        - `userStatus` string[], nullable — The userStatus field.
    - `scopingVersion` string, int64 — Internal version counter incremented when the campaign scope changes.
    - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions
      - `meaningOfSignature` string — The meaningOfSignature field.
      - `requireSignature` boolean — The requireSignature field.
      - `stepUpProviderId` string — The stepUpProviderId field.
      - `tspUrl` string — The tspUrl field.
    - `singleApp` C1ApiAccessreviewV1SingleAppSetup, nullable — The SingleAppSetup message.
      - `appId` string — The appId field.
    - `startedAt` string, date-time
    - `state` 'ACCESS_REVIEW_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_STATE_OPEN' | 'ACCESS_REVIEW_STATE_CLOSED' | 'ACCESS_REVIEW_STATE_PENDING' | 'ACCESS_REVIEW_STATE_REVIEW' | 'ACCESS_REVIEW_STATE_PREPARING' | 'ACCESS_REVIEW_STATE_STARTING' | 'ACCESS_REVIEW_STATE_DRAFT' | 'ACCESS_REVIEW_STATE_DELETING' | 'ACCESS_REVIEW_STATE_DELETED' | 'ACCESS_REVIEW_STATE_RESETTING_POLICIES' | 'ACCESS_REVIEW_STATE_COPYING_SETUP_ENTITLEMENTS' | 'ACCESS_REVIEW_STATE_COPYING_RESOURCE_TYPE_SELECTIONS' — The current lifecycle state of the campaign (e.g., draft, open, closed).
    - `updatedAt` string, date-time
    - `usePolicyOverride` boolean — Determines the policy applied to the campaign. Default is false, using the campaign policy. If true, the order of precedence is entitlement → app → campaign policy.
  - `expandMask` C1ApiAccessreviewV1AccessReviewExpandMask — The AccessReviewExpandMask message.
    - `paths` string[], nullable — The paths field.
  - `updateMask` string, nullable

## Response `200`

Successful response

- C1ApiAccessreviewV1AccessReviewServiceUpdateResponse — The AccessReviewServiceUpdateResponse message.
  - `accessReview` C1ApiAccessreviewV1AccessReviewView — The AccessReviewView message.
    - `accessReview` C1ApiAccessreviewV1AccessReview — An access review campaign (also called a certification campaign) that verifies whether users still need their access entitlements. This message contains a oneof named setup_metadata. Only a single field of the following list may be set at a time: - singleApp - multiApp - bindings
      - `accessReviewTemplateId` string — The ID of the template if the campaign was created from one
      - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field.
      - `autoCloseCampaign` boolean — Auto-close configuration completion_date is used as the scheduled close date
      - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field.
      - `autoGenerateReport` boolean — The autoGenerateReport field.
      - `autoResolve` boolean — When true, selections are automatically resolved if the entitlement grant no longer exists.
      - `autoStartCampaign` boolean — Auto-start configuration
      - `bindings` C1ApiAccessreviewV1BindingObjectSetup, nullable — The BindingObjectSetup message.
      - `campaignHealth` C1ApiAccessreviewV1CampaignHealthSnapshot — Campaign health snapshot. Read-only; updated by backend maintenance processors.
        - `checkedAt` string, date-time
        - `phantomLockedCount` integer — Number of pending actions locked by terminal (dead) submissions.
      - `campaignInsights` C1ApiAccessreviewV1CampaignInsights — AI-generated campaign insights (markdown). Read-only; set by backend when campaign is closed.
        - `markdown` string — The markdown field.
      - `closedAt` string, date-time
      - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list.
        - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used.
      - `completionDate` string, date-time
      - `connectorSourcesFrozenAt` string, date-time
      - `createdAt` string, date-time
      - `createdById` string — The ID of the user who created this campaign.
      - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — the default view that reviewers will see when they complete their access reviews
      - `description` string — An optional description providing context about this campaign.
      - `displayName` string — The human-readable name of this campaign.
      - `errorState` 'ACCESS_REVIEW_ERROR_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_ERROR_STATE_SELECTION_QUOTA_EXCEED_ERROR' — Error state set when a prepare action fails with a recoverable condition. Cleared when the campaign scope is changed.
      - `exclusionScope` C1ApiAccessreviewV1AccessReviewExclusionScope — The AccessReviewExclusionScope message.
        - `appUserStatuses` string[], nullable — The appUserStatuses field.
        - `appUserTypes` string[], nullable — The appUserTypes field.
      - `exemptCertifiedAccessConflicts` boolean — this setting is used for access conflict type scope
      - `expectedTicketCount` integer — The estimated number of review tasks that will be generated when the campaign starts.
      - `hasAccuracySupport` boolean — Whether the connectors in this campaign support accuracy checking.
      - `id` string — The unique identifier of this access review campaign.
      - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message.
        - `appUserStatuses` string[], nullable — The appUserStatuses field.
        - `appUserTypes` string[], nullable — The appUserTypes field.
        - `managerIds` string[], nullable — The managerIds field.
        - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
        - `noAccountOwners` boolean — The noAccountOwners field.
        - `userIds` string[], nullable — The userIds field.
        - `userStatuses` string[], nullable — The userStatuses field.
      - `multiApp` C1ApiAccessreviewV1MultiAppSetup, nullable — The MultiAppSetup message.
        - `appEntitlementDetails` object — The appEntitlementDetails field.
        - `appEntitlements` object — The appEntitlements field.
      - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle.
        - `sendClose` boolean — Whether to send a notification when the campaign is closed.
        - `sendKickoff` boolean — Whether to send a notification when the campaign is started.
        - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks.
      - `policyId` string — The ID of the review policy that governs how review tasks are assigned and resolved.
      - `reviewInstructions` string — Optional instructions displayed to reviewers when completing their review tasks.
      - `scheduledStartDate` string, date-time
      - `scope` C1ApiAccessreviewV1AccessReviewScope — The AccessReviewScope message.
        - `appUserStatuses` string[], nullable — The appUserStatuses field.
        - `appUserTypes` string[], nullable — The appUserTypes field.
      - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — this sets the scope type for the access review
      - `scopeV2` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection
        - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
          - `expression` string — The expression field.
        - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message.
          - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field.
          - `accountTypes` string[], nullable — The accountTypes field.
          - `appUserStatuses` string[], nullable — The appUserStatuses field.
          - `noAccountOwner` boolean — The noAccountOwner field.
        - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message.
        - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message.
        - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message.
        - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message.
        - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message.
        - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message.
          - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field.
          - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field.
        - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
          - `expression` string — The expression field.
        - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween
          - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message.
            - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs
            - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field.
            - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs
          - `daysSinceAdded` string, duration
          - `daysSinceLastUsed` string, duration
          - `daysSinceReviewed` string, duration
          - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message.
            - `endDate` string, date-time
            - `startDate` string, date-time
          - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field.
          - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field.
        - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message.
        - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message.
        - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message.
          - `userIds` string[], nullable — The userIds field.
        - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message.
        - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message.
        - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message.
          - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field.
            - `appId` string — The appId field.
            - `id` string — The id field.
          - `managerUserIds` string[], nullable — The managerUserIds field.
          - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
          - `userStatus` string[], nullable — The userStatus field.
      - `scopingVersion` string, int64 — Internal version counter incremented when the campaign scope changes.
      - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions
        - `meaningOfSignature` string — The meaningOfSignature field.
        - `requireSignature` boolean — The requireSignature field.
        - `stepUpProviderId` string — The stepUpProviderId field.
        - `tspUrl` string — The tspUrl field.
      - `singleApp` C1ApiAccessreviewV1SingleAppSetup, nullable — The SingleAppSetup message.
        - `appId` string — The appId field.
      - `startedAt` string, date-time
      - `state` 'ACCESS_REVIEW_STATE_UNSPECIFIED' | 'ACCESS_REVIEW_STATE_OPEN' | 'ACCESS_REVIEW_STATE_CLOSED' | 'ACCESS_REVIEW_STATE_PENDING' | 'ACCESS_REVIEW_STATE_REVIEW' | 'ACCESS_REVIEW_STATE_PREPARING' | 'ACCESS_REVIEW_STATE_STARTING' | 'ACCESS_REVIEW_STATE_DRAFT' | 'ACCESS_REVIEW_STATE_DELETING' | 'ACCESS_REVIEW_STATE_DELETED' | 'ACCESS_REVIEW_STATE_RESETTING_POLICIES' | 'ACCESS_REVIEW_STATE_COPYING_SETUP_ENTITLEMENTS' | 'ACCESS_REVIEW_STATE_COPYING_RESOURCE_TYPE_SELECTIONS' — The current lifecycle state of the campaign (e.g., draft, open, closed).
      - `updatedAt` string, date-time
      - `usePolicyOverride` boolean — Determines the policy applied to the campaign. Default is false, using the campaign policy. If true, the order of precedence is entitlement → app → campaign policy.
    - `createdByUserPath` string — The createdByUserPath field.
    - `objectPermissions` C1ApiIamV1ActorObjectPermissions — The ActorObjectPermissions message.
      - `delete` boolean — The delete field.
      - `edit` boolean — The edit field.
      - `extra` object — The extra field.
      - `read` boolean — The read field.
    - `policyPath` string — The policyPath field.
  - `expanded` object[], nullable — Related objects requested via the expand mask.
    - `@type` string — The type of the serialized message.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)