Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Identity Governance.access Review Set API

The identityGovernance.accessReviewSet API from Microsoft Entra ID (formerly Azure AD) — 45 operation(s) for identitygovernance.accessreviewset.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 77

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /identityGovernance/accessReviews Get the tenant's access review container · Get accessReviews from identityGovernance #
Ask an LLM
“What does the top-level access reviews object in identity governance contain?”
“Can I expand the review definitions and history definitions from the access review root?”
Tell an agent
Show me the access reviews root object for our tenant.
Fetch the access review set with its definitions expanded.
PATCH /identityGovernance/accessReviews Update the access review container · Update the navigation property accessReviews in identityGovernance #
Ask an LLM
“Can I patch the access review set root in one call instead of each definition?”
“Which collections hang off the access review set that a patch can touch?”
Tell an agent
Update the access review set root object.
Patch the access review set with these schedule definitions: {definitions}.
DELETE /identityGovernance/accessReviews Delete the access review container · Delete navigation property accessReviews for identityGovernance #
Ask an LLM
“Is it possible to remove the whole access reviews navigation property from identity governance?”
“What happens if I delete the access review set itself rather than a single definition?”
Tell an agent destructive · confirm first
Delete the access reviews container from identity governance.
Remove the access review set only if its ETag still matches {etag}.
GET /identityGovernance/accessReviews/definitions List access review schedule definitions · List definitions #
Ask an LLM
“Which access review series are set up in our Entra tenant?”
“Can I filter the access review schedule definitions by status or display name?”
Tell an agent
List all access review schedule definitions.
Show the first {top} access review definitions ordered by {orderby}.
POST /identityGovernance/accessReviews/definitions Create a new access review series · Create definitions #
Ask an LLM
“How do I schedule a recurring access review of a group's members?”
“Can I set fallback reviewers and stage settings when I create an access review?”
Tell an agent
Create an access review called {displayName} scoped to {scope} with reviewers {reviewers}.
Set up a new access review series named {displayName} with settings {settings}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id} Get one access review schedule definition · Get accessReviewScheduleDefinition #
Ask an LLM
“How can I see the scope, reviewers and settings of a specific access review series?”
“What properties come back when I read a single access review definition?”
Tell an agent
Get access review definition {definition}.
Show the reviewers and schedule settings of access review {definition}.
PUT /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id} Replace an access review schedule definition · Update accessReviewScheduleDefinition #
Ask an LLM
“Can I change the reviewers or recurrence of an access review series that already exists?”
“Is updating an existing access review definition a full replace rather than a patch?”
Tell an agent
Update access review definition {definition} to use reviewers {reviewers}.
Rename existing access review series {definition} to {displayName}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id} Delete an access review series · Delete accessReviewScheduleDefinition #
Ask an LLM
“How do I permanently remove an access review series from Entra?”
“Does deleting an access review schedule definition also get rid of its instances?”
Tell an agent destructive · confirm first
Delete access review definition {definition}.
Remove access review series {definition} if its ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances List occurrences of an access review series · List instances #
Ask an LLM
“Which recurrences have run so far for a given access review definition?”
“Can I filter an access review series' instances by status to find the in-progress one?”
Tell an agent
List the instances of access review definition {definition}.
Show instances of review series {definition} matching {filter}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances Add an instance to an access review series · Create new navigation property to instances for identityGovernance #
Ask an LLM
“Can I create an access review instance directly under a schedule definition?”
“What start and end dates can I give a new occurrence of a review series?”
Tell an agent
Create an instance of access review {definition} starting {startDateTime} and ending {endDateTime}.
Add a new occurrence to review series {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id} Get one occurrence of an access review · Get accessReviewInstance #
Ask an LLM
“How do I check the status and dates of one run of an access review?”
“What does a single access review instance tell me about its scope and reviewers?”
Tell an agent
Get instance {instance} of access review definition {definition}.
Show the status of review occurrence {instance} in series {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id} Change reviewers on a running access review · Update accessReviewInstance #
Ask an LLM
“Can I add fallback reviewers to an access review instance that's already in progress?”
“Why can't I remove existing fallback reviewers from a review instance?”
Tell an agent
Add fallback reviewers {fallbackReviewers} to review instance {instance} of {definition}, keeping scope {scope}.
Set the reviewers of in-progress instance {instance} in series {definition} to {reviewers} with scope {scope}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id} Delete an access review instance · Delete navigation property instances for identityGovernance #
Ask an LLM
“Is it possible to delete one occurrence of an access review without deleting the series?”
“Can I guard deletion of an access review instance with an ETag?”
Tell an agent destructive · confirm first
Delete instance {instance} from access review series {definition}.
Remove review occurrence {instance} of {definition} only if the ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers List reviewers contacted for a review instance · List contactedReviewers #
Ask an LLM
“Who were the individual people asked to complete a particular access review run?”
“Does the contacted reviewer list include people who never got a notification?”
Tell an agent
List contacted reviewers for instance {instance} of review {definition}.
Show who was asked to review occurrence {instance} in series {definition}, filtered by {filter}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers Add a contacted reviewer record to a review · Create new navigation property to contactedReviewers for identityGovernance #
Ask an LLM
“Can I add an entry to the contacted reviewers of an access review instance?”
“What fields does a contacted reviewer record take, like user principal name?”
Tell an agent
Add {userPrincipalName} as a contacted reviewer on instance {instance} of review {definition}.
Record contacted reviewer {displayName} for review occurrence {instance} of {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id} Get one contacted reviewer of a review · Get contactedReviewers from identityGovernance #
Ask an LLM
“When a group owner is the reviewer, how do I see which actual person was contacted?”
“What details are stored for a single contacted reviewer on an access review?”
Tell an agent
Get contacted reviewer {reviewer} on instance {instance} of review {definition}.
Show the user principal name of contacted reviewer {reviewer} in occurrence {instance} of {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id} Update a contacted reviewer record · Update the navigation property contactedReviewers in identityGovernance #
Ask an LLM
“Can I correct the display name stored for a contacted reviewer?”
“Which contacted reviewer fields can be patched on an access review instance?”
Tell an agent
Change the display name of contacted reviewer {reviewer} on instance {instance} of {definition} to {displayName}.
Update the user principal name of contacted reviewer {reviewer} in review occurrence {instance} of {definition} to {userPrincipalName}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/{accessReviewReviewer-id} Remove a contacted reviewer from a review · Delete navigation property contactedReviewers for identityGovernance #
Ask an LLM
“Can I delete a contacted reviewer entry from an access review instance?”
“Is an ETag check supported when removing a contacted reviewer?”
Tell an agent destructive · confirm first
Delete contacted reviewer {reviewer} from instance {instance} of review {definition}.
Remove contacted reviewer {reviewer} on occurrence {instance} of {definition} if the ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/contactedReviewers/$count Count contacted reviewers on a review · Get the number of the resource #
Ask an LLM
“How many people were contacted to complete a given access review instance?”
“Can I count only the contacted reviewers that match a filter?”
Tell an agent
Count the contacted reviewers on instance {instance} of review {definition}.
Give me the number of contacted reviewers in occurrence {instance} of {definition} matching {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions List decisions in an access review instance · List decisions #
Ask an LLM
“Which approve and deny decisions have been recorded in an access review run?”
“Can I filter the decision items of a review instance to only the ones not yet reviewed?”
Tell an agent
List all decisions for instance {instance} of access review {definition}.
Show decision items in review occurrence {instance} of {definition} where {filter}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions Add a decision item to a review instance · Create new navigation property to decisions for identityGovernance #
Ask an LLM
“Can I create a new decision item directly on an access review instance?”
“What goes into a decision item, like the principal, resource and justification?”
Tell an agent
Create a decision item on instance {instance} of review {definition} with decision {decision}.
Add a decision for principal {principal} on resource {resource} to review occurrence {instance} of {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id} Get one decision in a review instance · Get accessReviewInstanceDecisionItem #
Ask an LLM
“How do I see who reviewed a specific access decision and what they decided?”
“What does a single access review decision item include, like its recommendation?”
Tell an agent
Get decision {decision} from instance {instance} of review {definition}.
Show the recommendation and outcome of decision {decision} in review occurrence {instance} of {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id} Record a decision on a review instance item · Update the navigation property decisions in identityGovernance #
Ask an LLM
“How do I approve or deny one access decision directly on a review instance?”
“Can I add a justification when I update an instance-level decision item?”
Tell an agent
Set decision {decision} on instance {instance} of review {definition} to {outcome} with justification {justification}.
Mark decision item {decision} in review occurrence {instance} of {definition} as {outcome}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id} Delete a decision from a review instance · Delete navigation property decisions for identityGovernance #
Ask an LLM
“Can a decision item be deleted from an access review instance?”
“Is an If-Match ETag honoured when deleting a review decision item?”
Tell an agent destructive · confirm first
Delete decision {decision} from instance {instance} of review {definition}.
Remove decision item {decision} in occurrence {instance} of {definition} if its ETag matches {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights List insights behind a review decision · Get insights from identityGovernance #
Ask an LLM
“What recommendations does Entra give reviewers for a specific access decision?”
“Can a single decision item have more than one governance insight?”
Tell an agent
Pull the instance-level insights behind decision {decision} of run {instance}, series {definition}.
Show the approve-or-deny insights attached to decision {decision} of occurrence {instance} in {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights Add an insight to a review decision · Create new navigation property to insights for identityGovernance #
Ask an LLM
“Can I attach a new governance insight to an access review decision item?”
“What fields does creating a decision insight accept?”
Tell an agent
Attach an instance-level insight to decision {decision} of run {instance}, series {definition}.
Add an insight created at {insightCreatedDateTime} to decision {decision} of occurrence {instance} in {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Get one insight on a review decision · Get insights from identityGovernance #
Ask an LLM
“How do I read a specific recommendation insight attached to an access decision?”
“When was a given governance insight on a review decision created?”
Tell an agent
Read instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
Show when insight {insight} for decision {decision} in occurrence {instance} of {definition} was created.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Update an insight on a review decision · Update the navigation property insights in identityGovernance #
Ask an LLM
“Can I patch the creation time of an insight on an access review decision?”
“Which fields of a decision insight on an instance can be updated?”
Tell an agent
Patch instance-level insight {insight} for decision {decision} of run {instance}, series {definition}.
Set the created time of insight {insight} for decision {decision} in occurrence {instance} of {definition} to {insightCreatedDateTime}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Delete an insight from a review decision · Delete navigation property insights for identityGovernance #
Ask an LLM
“Can I remove a governance insight from an access review decision item?”
“Does deleting a decision insight support an ETag precondition?”
Tell an agent destructive · confirm first
Drop instance-level insight {insight} attached to decision {decision} of run {instance}, series {definition}.
Delete the instance-level insight {insight} for decision {decision}, run {instance}, series {definition}, guarded by ETag {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count Count insights on a review decision · Get the number of the resource #
Ask an LLM
“How many recommendation insights are attached to one access review decision?”
“Can I count only the decision insights that match a filter?”
Tell an agent
Count the insights on decision {decision} in instance {instance} of review {definition}.
Give me the number of insights for decision {decision} of occurrence {instance} in {definition} matching {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/$count Count decisions in an access review instance · Get the number of the resource #
Ask an LLM
“How many decision items does an access review run contain?”
“Can I count how many decisions in a review instance match a filter such as not reviewed?”
Tell an agent
Tally all instance-level decision items for run {instance} of series {definition}.
Give me the number of decision items in occurrence {instance} of {definition} where {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/decisions/microsoft.graph.filterByCurrentUser(on='{on}') List review decisions assigned to me · Invoke function filterByCurrentUser #
Ask an LLM
“Which decisions in an access review instance am I personally the reviewer on?”
“Can I see only my own pending decision items across a review instance?”
Tell an agent
List the decisions I need to review in instance {instance} of review {definition}, filtered on {on}.
Show my decision items as {on} for occurrence {instance} of access review {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.acceptRecommendations Accept all recommendations on a review · Invoke action acceptRecommendations #
Ask an LLM
“Can I accept every system recommendation for the decisions I haven't reviewed yet?”
“Is there a one-step way to go with Entra's recommendations on an access review run?”
Tell an agent
Accept the recommendations on all my unreviewed decisions in instance {instance} of review {definition}.
Apply the suggested approve or deny to every pending item I review in occurrence {instance} of {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.applyDecisions Apply completed access review decisions · Invoke action applyDecisions #
Ask an LLM
“How do I enforce review decisions when auto-apply was turned off?”
“Does an access review instance need to be Completed before I can apply its decisions?”
Tell an agent
Apply the decisions of completed review instance {instance} in series {definition}.
Enforce the recorded outcomes for access review occurrence {instance} of {definition} now.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.batchRecordDecisions Record review decisions in bulk · Invoke action batchRecordDecisions #
Ask an LLM
“Can I approve or deny many access review items at once by principal or resource?”
“How do reviewers record decisions in batches instead of one item at a time?”
Tell an agent
Record {decision} with justification {justification} for all items of principal {principalId} in instance {instance} of review {definition}.
Batch-record {decision} for every item on resource {resourceId} in occurrence {instance} of {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.resetDecisions Reset all decisions on a review instance · Invoke action resetDecisions #
Ask an LLM
“Can I wipe every decision on an access review run back to not reviewed?”
“What happens to recorded approvals when I reset an access review instance's decisions?”
Tell an agent destructive · confirm first
Reset all decisions in instance {instance} of review {definition} to not reviewed.
Clear every recorded outcome on access review occurrence {instance} of {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.sendReminder Remind reviewers of an active access review · Invoke action sendReminder #
Ask an LLM
“How do I nudge reviewers who haven't finished an active access review?”
“Can I send a reminder email to the reviewers of a running review instance?”
Tell an agent
Send a reminder to the reviewers of instance {instance} in review {definition}.
Nudge everyone reviewing occurrence {instance} of {definition} to finish.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/microsoft.graph.stop Stop an active access review instance · Invoke action stop #
Ask an LLM
“Can I end an in-progress access review run early and apply its decisions?”
“Will stopping one review instance stop future recurrences of the series?”
Tell an agent destructive · confirm first
Stop active review instance {instance} of access review {definition}.
End occurrence {instance} of review series {definition} now so decisions get applied.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages List stages of a multi-stage access review · List stages (of an access review) #
Ask an LLM
“What stages does a multi-stage access review instance go through?”
“Can I filter the stages of a review instance by status?”
Tell an agent
List the stages of instance {instance} in access review {definition}.
Show stages of review occurrence {instance} of {definition} matching {filter}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages Add a stage to a review instance · Create new navigation property to stages for identityGovernance #
Ask an LLM
“Can I create a new stage on a multi-stage access review instance?”
“What start date, end date and reviewers can a new review stage take?”
Tell an agent
Create a stage on instance {instance} of review {definition} with reviewers {reviewers}.
Add a review stage running {startDateTime} to {endDateTime} on occurrence {instance} of {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id} Get one stage of a multi-stage review · Get accessReviewStage #
Ask an LLM
“How do I check the status and dates of a single stage in a multi-stage review?”
“Who are the reviewers configured for a specific access review stage?”
Tell an agent
Get stage {stage} of instance {instance} in access review {definition}.
Show the status and reviewers of stage {stage} in occurrence {instance} of {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id} Change reviewers on an access review stage · Update accessReviewStage #
Ask an LLM
“Can I add fallback reviewers to a review stage that hasn't finished yet?”
“Which statuses must a review stage be in before I can update its reviewers?”
Tell an agent
Add fallback reviewers {fallbackReviewers} to stage {stage} of instance {instance} in review {definition}.
Set the reviewers of stage {stage} in occurrence {instance} of {definition} to {reviewers}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id} Delete a stage from a review instance · Delete navigation property stages for identityGovernance #
Ask an LLM
“Can I delete one stage from a multi-stage access review?”
“Does removing a review stage support an ETag check?”
Tell an agent destructive · confirm first
Delete stage {stage} from instance {instance} of review {definition}.
Remove review stage {stage} of occurrence {instance} in {definition} if the ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions List decisions within a review stage · List decisions (from a multi-stage access review) #
Ask an LLM
“Which decisions were recorded during one stage of a multi-stage access review?”
“Can I filter a review stage's decision items by outcome?”
Tell an agent
List decisions in stage {stage} of instance {instance} of review {definition}.
Show stage {stage} decision items in occurrence {instance} of {definition} where {filter}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions Add a decision item to a review stage · Create new navigation property to decisions for identityGovernance #
Ask an LLM
“Can I create a decision item inside a specific stage of an access review?”
“What principal and resource details does a new stage decision take?”
Tell an agent
Create a decision on stage {stage} of instance {instance} in review {definition} with outcome {outcome}.
Add a stage decision for principal {principal} on resource {resource} in stage {stage} of occurrence {instance}, series {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id} Get one decision within a review stage · Get accessReviewInstanceDecisionItem #
Ask an LLM
“How do I look up a single decision made during one stage of a multi-stage review?”
“Who reviewed a particular stage decision item and when?”
Tell an agent
Get decision {decision} in stage {stage} of instance {instance} of review {definition}.
Show who reviewed stage {stage} decision {decision} in occurrence {instance} of {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id} Approve or deny an item in a review stage · Update accessReviewInstanceDecisionItem #
Ask an LLM
“How do I record my approve or deny decision for an item in a multi-stage review?”
“Can I only update stage decisions where I'm the reviewer?”
Tell an agent
Set decision {decision} in stage {stage} of instance {instance}, review {definition}, to {outcome} because {justification}.
Approve stage {stage} item {decision} in occurrence {instance} of {definition} as {outcome}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id} Delete a decision from a review stage · Delete navigation property decisions for identityGovernance #
Ask an LLM
“Can I remove a decision item from a specific access review stage?”
“Is an ETag honoured when deleting a stage decision?”
Tell an agent destructive · confirm first
Erase the stage-level decision item {decision} recorded in stage {stage}, run {instance}, series {definition}.
Remove stage {stage} decision {decision} of occurrence {instance} in {definition} if the ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights List insights on a stage decision · Get insights from identityGovernance #
Ask an LLM
“What recommendations support a decision item in one stage of a multi-stage review?”
“Can I page through the insights on a stage-level decision?”
Tell an agent
List insights for decision {decision} in stage {stage} of instance {instance}, review {definition}.
Show the recommendation insights on stage {stage} decision {decision} of occurrence {instance} in {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights Add an insight to a stage decision · Create new navigation property to insights for identityGovernance #
Ask an LLM
“Can I attach a governance insight to a decision inside a review stage?”
“What does creating an insight on a stage decision require?”
Tell an agent
Create an insight on decision {decision} in stage {stage} of instance {instance}, review {definition}.
Add a stage {stage} insight created at {insightCreatedDateTime} to decision {decision} in occurrence {instance} of {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Get one insight on a stage decision · Get insights from identityGovernance #
Ask an LLM
“How do I read a single insight attached to a decision in a review stage?”
“When was a particular stage decision insight generated?”
Tell an agent
Get insight {insight} on decision {decision} in stage {stage} of instance {instance}, review {definition}.
Show the creation time of stage {stage} insight {insight} on decision {decision}, occurrence {instance} of {definition}.
PATCH /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Update an insight on a stage decision · Update the navigation property insights in identityGovernance #
Ask an LLM
“Can I patch an insight on a decision within a multi-stage review stage?”
“Which fields of a stage decision insight are updatable?”
Tell an agent
Update insight {insight} on decision {decision} in stage {stage} of instance {instance}, review {definition}.
Set stage {stage} insight {insight} on decision {decision} (occurrence {instance}, series {definition}) created time to {insightCreatedDateTime}.
DELETE /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/{governanceInsight-id} Delete an insight from a stage decision · Delete navigation property insights for identityGovernance #
Ask an LLM
“Can I remove an insight from a decision inside an access review stage?”
“Is an ETag check available when deleting a stage decision insight?”
Tell an agent destructive · confirm first
Delete insight {insight} from decision {decision} in stage {stage} of instance {instance}, review {definition}.
Remove stage {stage} insight {insight} on decision {decision} of occurrence {instance} in {definition} if the ETag is {etag}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/{accessReviewInstanceDecisionItem-id}/insights/$count Count insights on a stage decision · Get the number of the resource #
Ask an LLM
“How many insights are attached to a decision in one review stage?”
“Can I count stage decision insights that match a search?”
Tell an agent
Count insights on decision {decision} in stage {stage} of instance {instance}, review {definition}.
Give me the number of stage {stage} insights on decision {decision} in occurrence {instance} of {definition} matching {search}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/$count Count decisions in a review stage · Get the number of the resource #
Ask an LLM
“How many decision items are in one stage of a multi-stage access review?”
“Can I count a stage's decisions that match a filter?”
Tell an agent
Count the decisions in stage {stage} of instance {instance}, review {definition}.
Give me the number of stage {stage} decisions in occurrence {instance} of {definition} where {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/decisions/microsoft.graph.filterByCurrentUser(on='{on}') List my decisions in a review stage · Invoke function filterByCurrentUser #
Ask an LLM
“Which decisions in a specific review stage am I the reviewer for?”
“Can I see only my own items within one stage of a multi-stage review?”
Tell an agent
List my decisions in stage {stage} of instance {instance}, review {definition}, filtered on {on}.
Show the stage {stage} items I review as {on} in occurrence {instance} of {definition}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/{accessReviewStage-id}/microsoft.graph.stop Stop an in-progress access review stage · Invoke action stop #
Ask an LLM
“Can I end one stage of a multi-stage review early so the next stage starts?”
“What happens to reviewer input after I stop a review stage?”
Tell an agent destructive · confirm first
Stop stage {stage} of instance {instance} in access review {definition}.
End in-progress stage {stage} of occurrence {instance}, series {definition}, and move to the next stage.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/$count Count stages in a review instance · Get the number of the resource #
Ask an LLM
“How many stages does a given multi-stage review instance have?”
“Can I count review stages that match a filter?”
Tell an agent
Count the stages of instance {instance} in review {definition}.
Give me the number of stages in occurrence {instance} of {definition} matching {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/{accessReviewInstance-id}/stages/microsoft.graph.filterByCurrentUser(on='{on}') List review stages where I'm a reviewer · Invoke function filterByCurrentUser #
Ask an LLM
“Which stages of a multi-stage review have items waiting on me?”
“Can I list only the stages of a review instance where I'm assigned as reviewer?”
Tell an agent
List stages of instance {instance} in review {definition} where I review items, filtered on {on}.
Show my assigned stages as {on} for occurrence {instance} of {definition}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/$count Count instances of an access review series · Get the number of the resource #
Ask an LLM
“How many times has an access review series recurred?”
“Can I count a review series' instances that match a filter?”
Tell an agent
Count the instances of access review definition {definition}.
Give me the number of occurrences of review series {definition} where {filter}.
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/instances/microsoft.graph.filterByCurrentUser(on='{on}') List review instances assigned to me · Invoke function filterByCurrentUser #
Ask an LLM
“Which runs of an access review series still have decisions for me to make?”
“Can I see only the instances of a review series where I'm a reviewer?”
Tell an agent
List instances of review {definition} where I'm a reviewer, filtered on {on}.
Show the occurrences of series {definition} I review as {on}.
POST /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinition-id}/microsoft.graph.stop Stop an access review series · Invoke action stop #
Ask an LLM
“Can I stop a whole access review schedule definition rather than one run?”
“Is there an action to halt an access review series entirely?”
Tell an agent destructive · confirm first
Stop access review series {definition}.
Halt the schedule definition {definition} for this access review.
GET /identityGovernance/accessReviews/definitions/$count Count access review schedule definitions · Get the number of the resource #
Ask an LLM
“How many access review series exist in our tenant?”
“Can I count review definitions that match a search term?”
Tell an agent
Count all access review schedule definitions.
Give me the number of access review series matching {search}.
GET /identityGovernance/accessReviews/definitions/microsoft.graph.filterByCurrentUser(on='{on}') List access review series I review · Invoke function filterByCurrentUser #
Ask an LLM
“Which access review series am I a reviewer on?”
“Can I list only the review definitions where I have instances to review?”
Tell an agent
List the access review definitions where I'm a reviewer, filtered on {on}.
Show every review series I participate in as {on}.
GET /identityGovernance/accessReviews/historyDefinitions List access review history reports · List historyDefinitions #
Ask an LLM
“What access review history reports were created in the last 30 days?”
“Can I filter review history definitions by status?”
Tell an agent
List the access review history definitions.
Show review history report definitions matching {filter}.
POST /identityGovernance/accessReviews/historyDefinitions Create an access review history report · Create historyDefinitions #
Ask an LLM
“How do I export past access review decisions for an audit?”
“Can I limit a review history report to a date range and certain decisions?”
Tell an agent
Create a review history report named {displayName} covering {reviewHistoryPeriodStartDateTime} to {reviewHistoryPeriodEndDateTime}.
Set up an access review history definition for scopes {scopes} including decisions {decisions}.
GET /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id} Get an access review history report · Get accessReviewHistoryDefinition #
Ask an LLM
“Why does fetching an access review history definition older than 30 days return 404?”
“What date range and scopes does a given review history report cover?”
Tell an agent
Get access review history definition {history_definition}.
Show the period and scopes of history report {history_definition}.
PATCH /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id} Update an access review history report · Update the navigation property historyDefinitions in identityGovernance #
Ask an LLM
“Can I change the name or schedule of an existing access review history report?”
“Which fields of a review history definition can be patched?”
Tell an agent
Rename access review history definition {history_definition} to {displayName}.
Change the schedule settings of history report {history_definition} to {scheduleSettings}.
DELETE /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id} Delete an access review history report · Delete navigation property historyDefinitions for identityGovernance #
Ask an LLM
“Can I delete an access review history definition I no longer need?”
“Does deleting a review history report accept an If-Match ETag?”
Tell an agent destructive · confirm first
Delete access review history definition {history_definition}.
Remove history report {history_definition} if its ETag is {etag}.
GET /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances List runs of a review history report · List instances (of an accessReviewHistoryDefinition) #
Ask an LLM
“What runs of a recurring access review history report exist?”
“Can I filter review history instances by status to find ones that are done?”
Tell an agent
List the instances of history definition {history_definition}.
Show runs of history report {history_definition} where {filter}.
POST /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances Add a run to a review history report · Create new navigation property to instances for identityGovernance #
Ask an LLM
“Can I create a new instance of an access review history definition myself?”
“What period and run time can a new history report instance take?”
Tell an agent
Create an instance of history definition {history_definition} to run at {runDateTime}.
Add a history report run to {history_definition} covering {reviewHistoryPeriodStartDateTime} to {reviewHistoryPeriodEndDateTime}.
GET /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id} Get one run of a review history report · Get instances from identityGovernance #
Ask an LLM
“How do I check whether a particular review history report run has finished?”
“Does a non-recurring history definition have only one instance?”
Tell an agent
Get instance {history_instance} of history definition {history_definition}.
Show the status and download link of history run {history_instance} in report {history_definition}.
PATCH /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id} Update a run of a review history report · Update the navigation property instances in identityGovernance #
Ask an LLM
“Can I change the expiration of a review history report instance?”
“Which fields on a history report run can be patched?”
Tell an agent
Set the expiration of history instance {history_instance} in {history_definition} to {expirationDateTime}.
Update the status of history run {history_instance} of report {history_definition} to {status}.
DELETE /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id} Delete a run of a review history report · Delete navigation property instances for identityGovernance #
Ask an LLM
“Can I delete a single run of an access review history report?”
“Is an ETag check supported when removing a history report instance?”
Tell an agent destructive · confirm first
Delete instance {history_instance} of history definition {history_definition}.
Remove history run {history_instance} from report {history_definition} if the ETag is {etag}.
POST /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/{accessReviewHistoryInstance-id}/microsoft.graph.generateDownloadUri Generate a download link for review history · Invoke action generateDownloadUri #
Ask an LLM
“How do I get a downloadable file of access review history results?”
“How long is a generated review history download URI valid?”
Tell an agent
Generate a download URI for history instance {history_instance} of {history_definition}.
Create a 24-hour download link for completed history run {history_instance} in report {history_definition}.
GET /identityGovernance/accessReviews/historyDefinitions/{accessReviewHistoryDefinition-id}/instances/$count Count runs of a review history report · Get the number of the resource #
Ask an LLM
“How many runs does an access review history report have?”
“Can I count history report instances that match a filter?”
Tell an agent
Count the instances of history definition {history_definition}.
Give me the number of runs of history report {history_definition} where {filter}.
GET /identityGovernance/accessReviews/historyDefinitions/$count Count access review history reports · Get the number of the resource #
Ask an LLM
“How many access review history definitions do we have?”
“Can I count review history reports that match a search?”
Tell an agent
Count all access review history definitions.
Give me the number of review history reports matching {search}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-identitygovernance-accessreviewset-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-identitygovernance-accessreviewset-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Identity.Governance Identity Governance.access Review Set…
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (181 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-identitygovernance-accessreviewset-api-openapi.yml