---
title: "Create Access Profile From Cohort"
method: POST
path: "/api/v1/role-mining/access-profiles"
tags: ["Role Mining"]
---

# Create Access Profile From Cohort

`POST /api/v1/role-mining/access-profiles`

CreateAccessProfileFromCohort creates an access profile from a cohort definition,
 adds the specified entitlements, and sets up dynamic membership automation using
 a CEL expression derived from the profile filters.

## Request body

- C1ApiRoleMiningManagementV1CreateAccessProfileFromCohortRequest — The CreateAccessProfileFromCohortRequest message.
  - `celExpression` string — Optional CEL expression for dynamic membership. When non-empty, used instead of auto-generating from profile_filters.
  - `createTasks` boolean — If true, the automation will create JIT tasks for access changes. If false, users are synced to membership without creating tasks.
  - `description` string — Description for the access profile.
  - `displayName` string — Display name for the access profile.
  - `enableAutomation` boolean — If true, enable the dynamic membership automation immediately.
  - `entitlements` C1McpRoleMiningV1CohortEntitlement[], nullable — Entitlements to add to the access profile.
    - `appDisplayName` string — The appDisplayName field.
    - `appId` string — The appId field.
    - `appResourceDisplayName` string — The appResourceDisplayName field.
    - `appResourceTypeDisplayName` string — The appResourceTypeDisplayName field.
    - `coverage` number — The coverage field.
    - `entitlementDisplayName` string — The entitlementDisplayName field.
    - `entitlementId` string — The entitlementId field.
    - `grantedCount` integer — The grantedCount field.
    - `riskLevelValueId` string — The riskLevelValueId field.
  - `profileFilters` C1McpRoleMiningV1ProfileFilter[], nullable — Profile filters defining the cohort for dynamic membership.
    - `attribute` string — The attribute field.
    - `values` string[], nullable — The values field.
  - `suggestionId` string — Optional suggestion ID to mark as accepted after creating the profile.

## Response `200`

Successful response

- C1ApiRoleMiningManagementV1CreateAccessProfileFromCohortResponse — The CreateAccessProfileFromCohortResponse message.
  - `accessProfileId` string — The ID of the created access profile.
  - `celExpression` string — The CEL expression generated for dynamic membership.

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/d391405a35d3/schema)