---
title: "Create"
method: POST
path: "/api/v1/access_review_template"
tags: ["Access Review Template"]
---

# Create

`POST /api/v1/access_review_template`

Create creates a new access review template that defines a reusable configuration for launching campaigns.

## Request body

- C1ApiAccessreviewV1AccessReviewTemplateServiceCreateRequest — The AccessReviewTemplateServiceCreateRequest message.
  - `accessReviewDuration` string, duration
  - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field.
  - `annotations` object — Bounded key/value metadata bag for IaC marking and customer tags. See .rfcs/object-annotations.md §2. Limits: ≤16 entries; keys 1–128 chars matching ^[A-Za-z][A-Za-z0-9._/-]{0,127}$; values 0–256 chars matching URL-safe ASCII; total serialized ≤4096 bytes. Keys starting with `c1/` are reserved for server-managed use and rejected on write. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`.
  - `autoCloseCampaign` boolean — The autoCloseCampaign field.
  - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field.
  - `autoGenerateReport` boolean — auto generate report when campaign is closed
  - `autoStartCampaign` boolean — The autoStartCampaign field.
  - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list.
    - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used.
  - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — The defaultView field.
  - `description` string — An optional description providing context about the template.
  - `displayName` string — The display name for the new template.
  - `exemptCertifiedAccessConflicts` boolean — The exemptCertifiedAccessConflicts field.
  - `isCampaignScheduleEnabled` boolean — The isCampaignScheduleEnabled field.
  - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle.
    - `sendClose` boolean — Whether to send a notification when the campaign is closed.
    - `sendKickoff` boolean — Whether to send a notification when the campaign is started.
    - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks.
  - `ownerIds` string[], nullable — The IDs of the users who own this template. At least one owner is required.
  - `policyId` string — The ID of the default review policy for campaigns created from this template.
  - `recurrenceRule` C1ApiAccessreviewV1RecurrenceRule — The RecurrenceRule message. This message contains a oneof named end_condition. Only a single field of the following list may be set at a time: - endDate - occurrences
    - `endDate` string, date-time
    - `frequency` 'FREQUENCY_UNSPECIFIED' | 'FREQUENCY_NONE' | 'FREQUENCY_DAILY' | 'FREQUENCY_WEEKLY' | 'FREQUENCY_MONTHLY' | 'FREQUENCY_YEARLY' — The frequency field.
    - `interval` integer — The interval field.
    - `occurrences` integer, nullable — The occurrences field. This field is part of the `end_condition` oneof. See the documentation for `c1.api.accessreview.v1.RecurrenceRule` for more details.
    - `startDate` string, date-time
  - `reviewInstructions` string — The reviewInstructions field.
  - `scope` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection
    - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
      - `expression` string — The expression field.
    - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message.
      - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field.
      - `accountTypes` string[], nullable — The accountTypes field.
      - `appUserStatuses` string[], nullable — The appUserStatuses field.
      - `noAccountOwner` boolean — The noAccountOwner field.
    - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message.
    - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message.
    - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message.
    - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message.
    - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message.
    - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message.
      - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field.
      - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field.
    - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
      - `expression` string — The expression field.
    - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween
      - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message.
        - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs
        - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field.
        - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs
      - `daysSinceAdded` string, duration
      - `daysSinceLastUsed` string, duration
      - `daysSinceReviewed` string, duration
      - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message.
        - `endDate` string, date-time
        - `startDate` string, date-time
      - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field.
      - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field.
    - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message.
    - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message.
    - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message.
      - `userIds` string[], nullable — The userIds field.
    - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message.
    - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message.
    - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message.
      - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field.
        - `appId` string — The appId field.
        - `id` string — The id field.
      - `managerUserIds` string[], nullable — The managerUserIds field.
      - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
      - `userStatus` string[], nullable — The userStatus field.
  - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — The scopeType field.
  - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions
    - `meaningOfSignature` string — The meaningOfSignature field.
    - `requireSignature` boolean — The requireSignature field.
    - `stepUpProviderId` string — The stepUpProviderId field.
    - `tspUrl` string — The tspUrl field.
  - `usePolicyOverride` boolean — The usePolicyOverride field.

## Response `200`

Successful response

- C1ApiAccessreviewV1AccessReviewTemplateServiceCreateResponse — The AccessReviewTemplateServiceCreateResponse message.
  - `accessReviewTemplate` C1ApiAccessreviewV1AccessReviewTemplate — A reusable template that defines the configuration for creating access review campaigns. Templates can optionally be scheduled to automatically create campaigns on a recurring basis. This message contains a oneof named slack_channel_details. Only a single field of the following list may be set at a time: - slackChannel
    - `accessReviewDuration` string, duration
    - `accuracyIssueAction` 'ACCURACY_ISSUE_ACTION_UNSPECIFIED' | 'ACCURACY_ISSUE_ACTION_CONTINUE' | 'ACCURACY_ISSUE_ACTION_WAIT' — The accuracyIssueAction field.
    - `annotations` object — Key/value metadata. Up to 16 entries; keys 1-128 chars; values 0-256 chars; URL-safe ASCII. Keys starting with `c1/` are reserved. Updates have PATCH semantics: keys absent from the request are preserved; an empty value deletes the key. Well-known keys: `managed_by`, `iac_workspace`, `iac_resource_address`, `iac_tool_version`.
    - `autoCloseCampaign` boolean — Auto-close configuration start date and access_review_duration will be used to calculate the scheduled close date
    - `autoCloseDecision` 'CLOSE_DECISION_UNSPECIFIED' | 'CLOSE_DECISION_REVOKED' | 'CLOSE_DECISION_SKIP' | 'CLOSE_DECISION_NO_ACTION' — The autoCloseDecision field.
    - `autoGenerateReport` boolean — auto generate report when campaign is closed
    - `autoStartCampaign` boolean — Auto-start configuration next_scheduled_campaign_at will be used as the scheduled start date
    - `columnConfig` C1ApiAccessreviewV1AccessReviewColumnConfig — Configuration for which columns are visible in the reviewer task list.
      - `columns` string[], nullable — Ordered list of columns visible to reviewers. If empty, the default column set for the campaign's default_view is used.
    - `createdAt` string, date-time
    - `defaultView` 'ACCESS_REVIEW_VIEW_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_APP' | 'ACCESS_REVIEW_VIEW_TYPE_BY_USER' | 'ACCESS_REVIEW_VIEW_TYPE_UNSTRUCTURED' | 'ACCESS_REVIEW_VIEW_TYPE_BY_RESOURCE' — The defaultView field.
    - `deletedAt` string, date-time
    - `description` string — An optional description providing context about this template.
    - `displayName` string — The human-readable name of this template.
    - `exemptCertifiedAccessConflicts` boolean — The exemptCertifiedAccessConflicts field.
    - `id` string — The unique identifier of this template.
    - `inclusionScope` C1ApiAccessreviewV1AccessReviewInclusionScope — The AccessReviewInclusionScope message.
      - `appUserStatuses` string[], nullable — The appUserStatuses field.
      - `appUserTypes` string[], nullable — The appUserTypes field.
      - `managerIds` string[], nullable — The managerIds field.
      - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
      - `noAccountOwners` boolean — The noAccountOwners field.
      - `userIds` string[], nullable — The userIds field.
      - `userStatuses` string[], nullable — The userStatuses field.
    - `isCampaignScheduleEnabled` boolean — Whether automatic campaign creation on the recurrence schedule is enabled.
    - `nextScheduledCampaignAt` string, date-time
    - `notificationConfig` C1ApiAccessreviewV1NotificationConfig — Controls which email notifications are sent during the access review lifecycle.
      - `sendClose` boolean — Whether to send a notification when the campaign is closed.
      - `sendKickoff` boolean — Whether to send a notification when the campaign is started.
      - `sendReminders` boolean — Whether to send periodic reminder emails to reviewers with outstanding tasks.
    - `occurrences` integer — The number of campaigns that have been created from this template.
    - `policyId` string — The ID of the default review policy applied to campaigns created from this template.
    - `recurrenceRule` C1ApiAccessreviewV1RecurrenceRule — The RecurrenceRule message. This message contains a oneof named end_condition. Only a single field of the following list may be set at a time: - endDate - occurrences
      - `endDate` string, date-time
      - `frequency` 'FREQUENCY_UNSPECIFIED' | 'FREQUENCY_NONE' | 'FREQUENCY_DAILY' | 'FREQUENCY_WEEKLY' | 'FREQUENCY_MONTHLY' | 'FREQUENCY_YEARLY' — The frequency field.
      - `interval` integer — The interval field.
      - `occurrences` integer, nullable — The occurrences field. This field is part of the `end_condition` oneof. See the documentation for `c1.api.accessreview.v1.RecurrenceRule` for more details.
      - `startDate` string, date-time
    - `reviewInstructions` string — The reviewInstructions field.
    - `scope` C1ApiAccessreviewV1AccessReviewScopeV2 — The AccessReviewScopeV2 message. This message contains a oneof named apps_and_resources_scope. Only a single field of the following list may be set at a time: - appAccess - specificResources - appSelectionCriteria - resourceTypeSelections This message contains a oneof named users_scope. Only a single field of the following list may be set at a time: - allUsers - selectedUsers - userCriteria - celExpression This message contains a oneof named accounts_scope. Only a single field of the following list may be set at a time: - allAccounts - accountCriteria - accountCelExpression This message contains a oneof named grants_scope. Only a single field of the following list may be set at a time: - allGrants - grantsByCriteria This message contains a oneof named access_conflicts_scope. Only a single field of the following list may be set at a time: - allAccessConflicts - specificAccessConflicts This message contains a oneof named resource_scope. Only a single field of the following list may be set at a time: - resourceSelection
      - `accountCelExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
        - `expression` string — The expression field.
      - `accountCriteria` C1ApiAccessreviewV1AccountCriteriaScope, nullable — The AccountCriteriaScope message.
        - `accountDomain` 'APP_USER_DOMAIN_UNSPECIFIED' | 'APP_USER_DOMAIN_EXTERNAL' | 'APP_USER_DOMAIN_TRUSTED' — The accountDomain field.
        - `accountTypes` string[], nullable — The accountTypes field.
        - `appUserStatuses` string[], nullable — The appUserStatuses field.
        - `noAccountOwner` boolean — The noAccountOwner field.
      - `allAccessConflicts` C1ApiAccessreviewV1AllAccessConflictsScope, nullable — The AllAccessConflictsScope message.
      - `allAccounts` C1ApiAccessreviewV1AllAccountsScope, nullable — The AllAccountsScope message.
      - `allGrants` C1ApiAccessreviewV1AllGrantsScope, nullable — The AllGrantsScope message.
      - `allUsers` C1ApiAccessreviewV1AllUsersScope, nullable — The AllUsersScope message.
      - `appAccess` C1ApiAccessreviewV1ApplicationAccessScope, nullable — The ApplicationAccessScope message.
      - `appSelectionCriteria` C1ApiAccessreviewV1AppSelectionCriteriaScope, nullable — The AppSelectionCriteriaScope message.
        - `complianceFrameworkAttributeValueIds` string[], nullable — The complianceFrameworkAttributeValueIds field.
        - `riskLevelAttributeValueIds` string[], nullable — The riskLevelAttributeValueIds field.
      - `celExpression` C1ApiAccessreviewV1CelExpressionScope, nullable — The CelExpressionScope message.
        - `expression` string — The expression field.
      - `grantsByCriteria` C1ApiAccessreviewV1GrantsByCriteriaScope, nullable — The GrantsByCriteriaScope message. This message contains a oneof named criteria_filter. Only a single field of the following list may be set at a time: - daysSinceAdded - daysSinceReviewed - grantsAddedBetween
        - `accessProfileFilter` C1ApiAccessreviewV1GrantAccessProfileFilter — The GrantAccessProfileFilter message.
          - `excludedAccessProfileIds` string[], nullable — Access profile IDs to EXCLUDE from the campaign Used when filter_type = EXCLUDE_SPECIFIC Max 32 profile IDs
          - `filterType` 'ACCESS_PROFILE_FILTER_TYPE_UNSPECIFIED' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_ALL' | 'ACCESS_PROFILE_FILTER_TYPE_EXCLUDE_SPECIFIC' | 'ACCESS_PROFILE_FILTER_TYPE_INCLUDE_SPECIFIC' — The filterType field.
          - `includedAccessProfileIds` string[], nullable — Access profile IDs to INCLUDE in the campaign Used when filter_type = INCLUDE_SPECIFIC Max 32 profile IDs
        - `daysSinceAdded` string, duration
        - `daysSinceLastUsed` string, duration
        - `daysSinceReviewed` string, duration
        - `grantsAddedBetween` C1ApiAccessreviewV1GrantsAddedBetween, nullable — The GrantsAddedBetween message.
          - `endDate` string, date-time
          - `startDate` string, date-time
        - `sourceFilter` 'GRANT_SOURCE_FILTER_UNSPECIFIED' | 'GRANT_SOURCE_FILTER_DIRECT' | 'GRANT_SOURCE_FILTER_INHERITED' — The sourceFilter field.
        - `typeFilter` 'GRANT_FILTER_TYPE_UNSPECIFIED' | 'GRANT_FILTER_TYPE_PERMANENT' | 'GRANT_FILTER_TYPE_TEMPORARY' — The typeFilter field.
      - `resourceSelection` C1ApiAccessreviewV1ResourceSelectionScope, nullable — The ResourceSelectionScope message.
      - `resourceTypeSelections` C1ApiAccessreviewV1ResourceTypeSelectionScope, nullable — The ResourceTypeSelectionScope message.
      - `selectedUsers` C1ApiAccessreviewV1SelectedUsersScope, nullable — The SelectedUsersScope message.
        - `userIds` string[], nullable — The userIds field.
      - `specificAccessConflicts` C1ApiAccessreviewV1SpecificAccessConflictsScope, nullable — The SpecificAccessConflictsScope message.
      - `specificResources` C1ApiAccessreviewV1SpecificResourcesScope, nullable — The SpecificResourcesScope message.
      - `userCriteria` C1ApiAccessreviewV1UserCriteriaScope, nullable — The UserCriteriaScope message.
        - `groupAppEntitlementsRef` C1ApiAppV1AppEntitlementRef[], nullable — The groupAppEntitlementsRef field.
          - `appId` string — The appId field.
          - `id` string — The id field.
        - `managerUserIds` string[], nullable — The managerUserIds field.
        - `multiUserProfileAttributes` object — The multiUserProfileAttributes field.
        - `userStatus` string[], nullable — The userStatus field.
    - `scopeType` 'ACCESS_REVIEW_SCOPE_TYPE_UNSPECIFIED' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ENTITLEMENTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_ACCESS_CONFLICTS' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_RESOURCE' | 'ACCESS_REVIEW_SCOPE_TYPE_BY_INHERITANCE' — The scopeType field.
    - `signatureConfig` C1ApiAccessreviewV1ReviewSignatureConfig — Signature configuration for access review submissions
      - `meaningOfSignature` string — The meaningOfSignature field.
      - `requireSignature` boolean — The requireSignature field.
      - `stepUpProviderId` string — The stepUpProviderId field.
      - `tspUrl` string — The tspUrl field.
    - `slackChannel` C1ApiAccessreviewV1SlackChannel, nullable — The SlackChannel message.
      - `description` string — The description field.
      - `name` string — The name field.
    - `updatedAt` string, date-time
    - `usePolicyOverride` boolean — The usePolicyOverride field.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)