---
title: "Get Incident"
method: GET
path: "/incident/v1/incidents/{incidentId}"
tags: ["Incidents"]
---

# Get Incident

`GET /incident/v1/incidents/{incidentId}`

Use this API to retrieve a single incident by its unique identifier along with the linked assessments, status, and the associated attributes.

## Path parameters

- `incidentId` string, uuid, required — Incident ID

## Response `200`

OK

- IncidentDetails
  - `id` string, uuid — Incident Identifier
  - `number` integer — Incident Number
  - `incidentTypeId` string, uuid — The unique identifier for the incident type.
  - `incidentTypeName` string — The name of the incident type.
  - `name` string — Incident Name
  - `description` string — Incident Description
  - `sourceType` 'MANUAL' | 'ASSESSMENT' | 'WEBFORM' | 'NONE' | 'INTEGRATION' — Creation Source
  - `assessmentLinks` AssessmentInformation[] — Source Assessment Link
    - `assessmentId` string, uuid, required — Assessment Identifier
    - `assessmentName` string — Assessment Name
    - `assessmentStatus` 'NOT_STARTED' | 'IN_PROGRESS' | 'UNDER_REVIEW' | 'COMPLETED' — Assessment Status
    - `primary` boolean
  - `orgGroupId` string, uuid — Organization Group Id
  - `orgGroupName` string — Organization Group Name
  - `rootCause` string — Root Cause
  - `dateOccurred` string, date-time — The date and time when the incident occurred, represented as an ISO 8601 timestamp in UTC.
  - `dateClosed` string, date-time — The date and time when the incident was closed, represented as an ISO 8601 timestamp in UTC.
  - `dateDiscovered` string, date-time — The date and time when the incident was discovered, represented as an ISO 8601 timestamp in UTC.
  - `deadline` string, date-time — The date by which the incident investigation or notification must be completed, represented as an ISO 8601 timestamp in UTC.
  - `createdBy` string, uuid — Incident Created User Id.
  - `creator` string — Incident Created User Name
  - `assigneeId` string, uuid — Incident User Assignee Id
  - `assigneeName` string — Incident User Assignee Name
  - `createdDT` string, date-time — The date and time when the incident was created, represented as an ISO 8601 timestamp in UTC.
  - `workflowId` string, uuid — Incident Workflow Id
  - `workflowName` string — Incident Workflow Name.
  - `incidentStageId` string, uuid — Incident Stage Id
  - `incidentStageName` string — Incident Stage Name
  - `incidentStageBadgeColor` string — The badge color of the incident workflow stage.
  - `notificationNeeded` 'YES' | 'NO' | 'UNKNOWN' — Incident Notification Needed
  - `incidentStatus` 'OPEN' | 'CLOSED'
  - `schemaId` string, uuid — The unique identifier of the custom attribute schema associated with the incident.
  - `updatedDT` string, date-time — The date and time when the incident was last updated, represented as an ISO 8601 timestamp in UTC.
  - `attributeValues` object — Custom Attributes
  - `incidentAssigneeInformation` IncidentAssigneeInformation[] — A list containing information about users or groups assigned to the incident
    - `assigneeId` string, uuid — Incident User Assignee Id
    - `assigneeName` string — Incident User Assignee Name
    - `type` 'USER' | 'GROUP' — Indicates whether the assignee is an individual user or a group of users.
  - `closedSettingOn` boolean

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `429` — Too Many Requests. For more information, see [API Rate Limits](https://developer.onetrust.com/onetrust/reference/rate-limits-overview).
- `500` — Internal Server Error

---

[API](https://skmtc.net/onetrust/apis/platform-access-management.md) · [All operations](https://skmtc.net/onetrust/apis/platform-access-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/onetrust/platform-access-management/revisions/21de3aa0b170/schema)