Sign in
latestOpenAPI 3.1.0raw.githubusercontent.com2026-08-216381,9552.9 MB

f2cf3228f366

Access Conflict

Create Monitor

Create a new conflict monitor for defining a Separation of Duty rule. Entitlement sets are bound separately via AppEntitlementMonitorBindingService.

post/api/v1/accessconflict

Request body

descriptionstring

An optional description explaining the purpose of this Separation of Duty rule.

displayNamestring required

The human-readable name for the conflict monitor.

Response

A conflict monitor defines a Separation of Duty rule between two entitlement sets. It detects when any user holds entitlements from both set A and set B simultaneously.

createdAtstring date-time nullable
deletedAtstring date-time nullable
descriptionstring

A description explaining the purpose of this Separation of Duty rule.

displayNamestring

The human-readable name of the conflict monitor.

enabledboolean

Whether the conflict monitor is actively scanning for violations.

entitlementSetAIdstring

The identifier of entitlement set A in the conflict rule.

entitlementSetBIdstring

The identifier of entitlement set B in the conflict rule.

idstring

The unique identifier of this conflict monitor.

negateGroupBboolean

When true, the rule flags users who are in set A but NOT in set B ("is not in"), instead of the default A-and-B intersection.

updatedAtstring date-time nullable