ConductorOne API

The ConductorOne (C1) API is an HTTP API for managing ConductorOne resources — apps, entitlements, users, access reviews, automations, connectors, policies, requests, and audit data. It uses OAuth2 client credentials (client credentials sent in the request body) or bearer tokens, and is served per-tenant at https://{tenantDomain}.conductor.one.

OpenAPI Specification

conductorone-openapi-original.yml Raw ↑
components:
  schemas:
    c1.api.accessconflict.v1.AppEntitlementMonitorBinding:
      description: The AppEntitlementMonitorBinding message.
      properties:
        appEntitlementId:
          description: The appEntitlementId field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        createdAt:
          format: date-time
          readOnly: false
          type: string
        deletedAt:
          format: date-time
          readOnly: false
          type: string
        entitlementGroup:
          description: The entitlementGroup field.
          enum:
            - ENTITLEMENT_GROUP_UNSPECIFIED
            - ENTITLEMENT_GROUP_A
            - ENTITLEMENT_GROUP_B
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        monitorId:
          description: The monitorId field.
          readOnly: false
          type: string
        updatedAt:
          format: date-time
          readOnly: false
          type: string
      title: App Entitlement Monitor Binding
      type: object
      x-speakeasy-name-override: AppEntitlementMonitorBinding
    c1.api.accessconflict.v1.ConflictMonitor:
      description: The ConflictMonitor message.
      properties:
        createdAt:
          format: date-time
          readOnly: false
          type: string
        deletedAt:
          format: date-time
          readOnly: false
          type: string
        description:
          description: The description field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        enabled:
          description: The enabled field.
          readOnly: false
          type: boolean
        entitlementSetAId:
          description: The entitlementSetAId field.
          readOnly: false
          type: string
        entitlementSetBId:
          description: The entitlementSetBId field.
          readOnly: false
          type: string
        id:
          description: The id field.
          readOnly: false
          type: string
        notificationConfig:
          $ref: '#/components/schemas/c1.api.accessconflict.v1.NotificationConfig'
        updatedAt:
          format: date-time
          readOnly: false
          type: string
      title: Conflict Monitor
      type: object
      x-speakeasy-name-override: ConflictMonitor
    c1.api.accessconflict.v1.ConflictMonitorCreateRequest:
      description: The ConflictMonitorCreateRequest message.
      properties:
        description:
          description: The description field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        notificationConfig:
          $ref: '#/components/schemas/c1.api.accessconflict.v1.NotificationConfig'
      required:
        - displayName
      title: Conflict Monitor Create Request
      type: object
      x-speakeasy-name-override: ConflictMonitorCreateRequest
    c1.api.accessconflict.v1.ConflictMonitorDeleteRequestInput:
      description: The ConflictMonitorDeleteRequest message.
      title: Conflict Monitor Delete Request
      type: object
      x-speakeasy-name-override: ConflictMonitorDeleteRequest
    c1.api.accessconflict.v1.ConflictMonitorDeleteResponse:
      description: The ConflictMonitorDeleteResponse message.
      title: Conflict Monitor Delete Response
      type: object
      x-speakeasy-name-override: ConflictMonitorDeleteResponse
    c1.api.accessconflict.v1.ConflictMonitorRef:
      description: The ConflictMonitorRef message.
      properties:
        id:
          description: The id field.
          readOnly: false
          type: string
      title: Conflict Monitor Ref
      type: object
      x-speakeasy-name-override: ConflictMonitorRef
    c1.api.accessconflict.v1.ConflictMonitorUpdateRequestInput:
      description: The ConflictMonitorUpdateRequest message.
      properties:
        description:
          description: The description field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        notificationConfig:
          $ref: '#/components/schemas/c1.api.accessconflict.v1.NotificationConfig'
      title: Conflict Monitor Update Request
      type: object
      x-speakeasy-name-override: ConflictMonitorUpdateRequest
    c1.api.accessconflict.v1.CreateAppEntitlementMonitorBindingRequest:
      description: The CreateAppEntitlementMonitorBindingRequest message.
      properties:
        appEntitlementId:
          description: The appEntitlementId field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        entitlementGroup:
          description: The entitlementGroup field.
          enum:
            - ENTITLEMENT_GROUP_UNSPECIFIED
            - ENTITLEMENT_GROUP_A
            - ENTITLEMENT_GROUP_B
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        monitorId:
          description: The monitorId field.
          readOnly: false
          type: string
      title: Create App Entitlement Monitor Binding Request
      type: object
      x-speakeasy-name-override: CreateAppEntitlementMonitorBindingRequest
    c1.api.accessconflict.v1.DeleteAppEntitlementMonitorBindingRequest:
      description: The DeleteAppEntitlementMonitorBindingRequest message.
      properties:
        appEntitlementId:
          description: The appEntitlementId field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        entitlementGroup:
          description: The entitlementGroup field.
          enum:
            - ENTITLEMENT_GROUP_UNSPECIFIED
            - ENTITLEMENT_GROUP_A
            - ENTITLEMENT_GROUP_B
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        monitorId:
          description: The monitorId field.
          readOnly: false
          type: string
      title: Delete App Entitlement Monitor Binding Request
      type: object
      x-speakeasy-name-override: DeleteAppEntitlementMonitorBindingRequest
    c1.api.accessconflict.v1.DeleteAppEntitlementMonitorBindingResponse:
      description: The DeleteAppEntitlementMonitorBindingResponse message.
      title: Delete App Entitlement Monitor Binding Response
      type: object
      x-speakeasy-name-override: DeleteAppEntitlementMonitorBindingResponse
    c1.api.accessconflict.v1.EmailNotifications:
      description: The EmailNotifications message.
      properties:
        enabled:
          description: The enabled field.
          readOnly: false
          type: boolean
        identityUserIds:
          description: The identityUserIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Email Notifications
      type: object
      x-speakeasy-name-override: EmailNotifications
    c1.api.accessconflict.v1.GetAppEntitlementMonitorBindingRequest:
      description: The GetAppEntitlementMonitorBindingRequest message.
      properties:
        appEntitlementId:
          description: The appEntitlementId field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        entitlementGroup:
          description: The entitlementGroup field.
          enum:
            - ENTITLEMENT_GROUP_UNSPECIFIED
            - ENTITLEMENT_GROUP_A
            - ENTITLEMENT_GROUP_B
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        monitorId:
          description: The monitorId field.
          readOnly: false
          type: string
      title: Get App Entitlement Monitor Binding Request
      type: object
      x-speakeasy-name-override: GetAppEntitlementMonitorBindingRequest
    c1.api.accessconflict.v1.NotificationConfig:
      description: The NotificationConfig message.
      properties:
        emailNotifications:
          $ref: '#/components/schemas/c1.api.accessconflict.v1.EmailNotifications'
        slackNotifications:
          $ref: '#/components/schemas/c1.api.accessconflict.v1.SlackNotifications'
      title: Notification Config
      type: object
      x-speakeasy-name-override: NotificationConfig
    c1.api.accessconflict.v1.SlackNotifications:
      description: The SlackNotifications message.
      properties:
        channelId:
          description: The channelId field.
          readOnly: false
          type: string
        channelName:
          description: The channelName field.
          readOnly: false
          type: string
        enabled:
          description: The enabled field.
          readOnly: false
          type: boolean
      title: Slack Notifications
      type: object
      x-speakeasy-name-override: SlackNotifications
    c1.api.app.v1.AddAppEntitlementOwnerRequestInput:
      description: The request message for adding an app entitlement owner.
      properties:
        userId:
          description: >-
            The user_id field for the user to add as an owner of the app
            entitlement.
          readOnly: false
          type: string
      title: Add App Entitlement Owner Request
      type: object
      x-speakeasy-name-override: AddAppEntitlementOwnerRequest
    c1.api.app.v1.AddAppEntitlementOwnerResponse:
      description: The empty response message for adding an app entitlement owner.
      title: Add App Entitlement Owner Response
      type: object
      x-speakeasy-name-override: AddAppEntitlementOwnerResponse
    c1.api.app.v1.AddAppOwnerRequestInput:
      description: >-
        Empty request body. Just placeholder for the add app owner request which
        uses URL values for input.
      title: Add App Owner Request
      type: object
      x-speakeasy-name-override: AddAppOwnerRequest
    c1.api.app.v1.AddAppOwnerResponse:
      description: Empty response with a status code indicating success
      title: Add App Owner Response
      type: object
      x-speakeasy-name-override: AddAppOwnerResponse
    c1.api.app.v1.AddAppResourceOwnerRequestInput:
      description: The AddAppResourceOwnerRequest message.
      properties:
        userId:
          description: The userId field.
          readOnly: false
          type: string
      title: Add App Resource Owner Request
      type: object
      x-speakeasy-name-override: AddAppResourceOwnerRequest
    c1.api.app.v1.AddAppResourceOwnerResponse:
      description: The AddAppResourceOwnerResponse message.
      title: Add App Resource Owner Response
      type: object
      x-speakeasy-name-override: AddAppResourceOwnerResponse
    c1.api.app.v1.AddAutomationExclusionRequestInput:
      description: The AddAutomationExclusionRequest message.
      properties:
        userIds:
          description: The userIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Add Automation Exclusion Request
      type: object
      x-speakeasy-name-override: AddAutomationExclusionRequest
    c1.api.app.v1.AddAutomationExclusionResponse:
      description: Empty response with a status code indicating success.
      title: Add Automation Exclusion Response
      type: object
      x-speakeasy-name-override: AddAutomationExclusionResponse
    c1.api.app.v1.AddManuallyManagedUsersRequestInput:
      description: The AddManuallyManagedUsersRequest message.
      properties:
        userIds:
          description: The userIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Add Manually Managed Users Request
      type: object
      x-speakeasy-name-override: AddManuallyManagedUsersRequest
    c1.api.app.v1.App:
      description: >-
        The App object provides all of the details for an app, as well as some
        configuration.
      properties:
        appAccountId:
          description: The ID of the Account named by AccountName.
          readOnly: true
          type: string
        appAccountName:
          description: >-
            The AccountName of the app. For example, AWS is AccountID, Github is
            Org Name, and Okta is Okta Subdomain.
          readOnly: true
          type: string
        appOwners:
          description: The owners of the app.
          items:
            $ref: '#/components/schemas/c1.api.user.v1.User'
          nullable: true
          readOnly: true
          type: array
        certifyPolicyId:
          description: The ID of the Certify Policy associated with this App.
          readOnly: false
          type: string
        connectorVersion:
          description: The connectorVersion field.
          format: uint32
          readOnly: false
          type: integer
        createdAt:
          format: date-time
          readOnly: true
          type: string
        defaultRequestCatalogId:
          description: The ID for the default request catalog for this app.
          readOnly: false
          type: string
        deletedAt:
          format: date-time
          readOnly: true
          type: string
        description:
          description: The app's description.
          readOnly: false
          type: string
        displayName:
          description: The app's display name.
          readOnly: false
          type: string
        fieldMask:
          nullable: true
          readOnly: true
          type: string
        grantPolicyId:
          description: The ID of the Grant Policy associated with this App.
          readOnly: false
          type: string
        iconUrl:
          description: The URL of an icon to display for the app.
          readOnly: false
          type: string
        id:
          description: The ID of the app.
          readOnly: true
          type: string
        identityMatching:
          description: The identityMatching field.
          enum:
            - APP_USER_IDENTITY_MATCHING_UNSPECIFIED
            - APP_USER_IDENTITY_MATCHING_STRICT
            - APP_USER_IDENTITY_MATCHING_DISPLAY_NAME
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        instructions:
          description: >-
            If you add instructions here, they will be shown to users in the
            access request form when requesting access for this app.
          readOnly: false
          type: string
        isDirectory:
          description: Specifies if the app is a directory.
          readOnly: true
          type: boolean
        isManuallyManaged:
          description: The isManuallyManaged field.
          readOnly: false
          type: boolean
        logoUri:
          description: The URL of a logo to display for the app.
          readOnly: true
          type: string
        monthlyCostUsd:
          description: >-
            The cost of an app per-seat, so that total cost can be calculated by
            the grant count.
          format: int32
          readOnly: false
          type: integer
        parentAppId:
          description: The ID of the app that created this app, if any.
          readOnly: true
          type: string
        revokePolicyId:
          description: The ID of the Revoke Policy associated with this App.
          readOnly: false
          type: string
        strictAccessEntitlementProvisioning:
          description: The strictAccessEntitlementProvisioning field.
          readOnly: false
          type: boolean
        updatedAt:
          format: date-time
          readOnly: true
          type: string
        userCount:
          description: The number of users with grants to this app.
          format: int64
          readOnly: true
          type: string
      title: App
      type: object
      x-speakeasy-entity: App
      x-speakeasy-name-override: App
    c1.api.app.v1.AppAccessRequestDefaults:
      description: >
        The AppAccessRequestDefaults message.


        This message contains a oneof named max_grant_duration. Only a single
        field of the following list may be set at a time:
          - durationUnset
          - durationGrant
      properties:
        appId:
          description: The app id for the app access request rule
          readOnly: false
          type: string
        catalogIds:
          description: The request catalog ids for the app access request rule.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        defaultsEnabled:
          description: >-
            If true the app level request configuration will be applied to
            specified resource types.
          readOnly: false
          type: boolean
        durationGrant:
          format: duration
          readOnly: false
          type: string
        durationUnset:
          nullable: true
          readOnly: false
          type: object
        emergencyGrantEnabled:
          description: If emergency grants are enabled for this app access request rule.
          readOnly: false
          type: boolean
        emergencyGrantPolicyId:
          description: The policy id for the emergency grant policy.
          readOnly: false
          type: string
        requestPolicyId:
          description: The requestPolicyId field.
          readOnly: false
          type: string
        resourceTypeIds:
          description: >-
            The app resource type ids for which the app access request defaults
            are applied.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        state:
          description: The last applied state of the app access request defaults.
          enum:
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_UNSPECIFIED
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_RUNNING
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_SUCCESS
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_FAILED
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCELING
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCEL_SUCCESS
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCEL_ERROR
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
      title: App Access Request Defaults
      type: object
      x-speakeasy-name-override: AppAccessRequestDefaults
    c1.api.app.v1.AppAccessRequestDefaultsInput:
      description: >
        The AppAccessRequestDefaults message.


        This message contains a oneof named max_grant_duration. Only a single
        field of the following list may be set at a time:
          - durationUnset
          - durationGrant
      properties:
        catalogIds:
          description: The request catalog ids for the app access request rule.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        defaultsEnabled:
          description: >-
            If true the app level request configuration will be applied to
            specified resource types.
          readOnly: false
          type: boolean
        durationGrant:
          format: duration
          readOnly: false
          type: string
        durationUnset:
          nullable: true
          readOnly: false
          type: object
        emergencyGrantEnabled:
          description: If emergency grants are enabled for this app access request rule.
          readOnly: false
          type: boolean
        emergencyGrantPolicyId:
          description: The policy id for the emergency grant policy.
          readOnly: false
          type: string
        requestPolicyId:
          description: The requestPolicyId field.
          readOnly: false
          type: string
        resourceTypeIds:
          description: >-
            The app resource type ids for which the app access request defaults
            are applied.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        state:
          description: The last applied state of the app access request defaults.
          enum:
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_UNSPECIFIED
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_RUNNING
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_SUCCESS
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_FAILED
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCELING
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCEL_SUCCESS
            - APP_ACCESS_REQUEST_DEFAULTS_LAST_APPLY_STATE_CANCEL_ERROR
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
      title: App Access Request Defaults
      type: object
      x-speakeasy-name-override: AppAccessRequestDefaults
    c1.api.app.v1.AppActionsServiceGenerateReportRequestInput:
      description: >-
        Empty request body. Just placeholder for the generate app report request
        which uses URL values for input.
      title: App Actions Service Generate Report Request
      type: object
      x-speakeasy-name-override: AppActionsServiceGenerateReportRequest
    c1.api.app.v1.AppActionsServiceGenerateReportResponse:
      description: Empty response body. Status code indicates success.
      title: App Actions Service Generate Report Response
      type: object
      x-speakeasy-name-override: AppActionsServiceGenerateReportResponse
    c1.api.app.v1.AppEntitlement:
      description: >
        The app entitlement represents one permission in a downstream App (SAAS)
        that can be granted. For example, GitHub Read vs GitHub Write.


        This message contains a oneof named max_grant_duration. Only a single
        field of the following list may be set at a time:
          - durationUnset
          - durationGrant
      properties:
        alias:
          description: >-
            The alias of the app entitlement used by Cone. Also exact-match
            queryable.
          readOnly: false
          type: string
        appId:
          description: The ID of the app that is associated with the app entitlement.
          readOnly: false
          type: string
        appResourceId:
          description: >-
            The ID of the app resource that is associated with the app
            entitlement
          readOnly: false
          type: string
        appResourceTypeId:
          description: >-
            The ID of the app resource type that is associated with the app
            entitlement
          readOnly: false
          type: string
        certifyPolicyId:
          description: >-
            The ID of the policy that will be used for certify tickets related
            to the app entitlement.
          readOnly: false
          type: string
        complianceFrameworkValueIds:
          description: >-
            The IDs of different compliance frameworks associated with this app
            entitlement ex (SOX, HIPAA, PCI, etc.)
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        createdAt:
          format: date-time
          readOnly: true
          type: string
        defaultValuesApplied:
          description: >-
            Flag to indicate if app-level access request defaults have been
            applied to the entitlement
          readOnly: false
          type: boolean
        deletedAt:
          format: date-time
          readOnly: true
          type: string
        deprovisionerPolicy:
          $ref: '#/components/schemas/c1.api.policy.v1.ProvisionPolicy'
        description:
          description: The description of the app entitlement.
          readOnly: false
          type: string
        displayName:
          description: The display name of the app entitlement.
          readOnly: false
          type: string
        durationGrant:
          format: duration
          readOnly: false
          type: string
        durationUnset:
          nullable: true
          readOnly: false
          type: object
        emergencyGrantEnabled:
          description: >-
            This enables tasks to be created in an emergency and use a selected
            emergency access policy.
          readOnly: false
          type: boolean
        emergencyGrantPolicyId:
          description: >-
            The ID of the policy that will be used for emergency access grant
            tasks.
          readOnly: false
          type: string
        grantCount:
          description: The amount of grants open for this entitlement
          format: int64
          readOnly: true
          type: string
        grantPolicyId:
          description: >-
            The ID of the policy that will be used for grant tickets related to
            the app entitlement.
          readOnly: false
          type: string
        id:
          description: The unique ID for the App Entitlement.
          readOnly: true
          type: string
        isAutomationEnabled:
          description: >-
            Flag to indicate whether automation (for adding users to entitlement
            based on rules) has been enabled.
          readOnly: true
          type: boolean
        isManuallyManaged:
          description: Flag to indicate if the app entitlement is manually managed.
          readOnly: false
          type: boolean
        matchBatonId:
          description: The matchBatonId field.
          readOnly: false
          type: string
        overrideAccessRequestsDefaults:
          description: >-
            Flag to indicate if the app-level access request settings have been
            overridden for the entitlement
          readOnly: false
          type: boolean
        provisionerPolicy:
          $ref: '#/components/schemas/c1.api.policy.v1.ProvisionPolicy'
        purpose:
          description: The purpose field.
          enum:
            - APP_ENTITLEMENT_PURPOSE_VALUE_UNSPECIFIED
            - APP_ENTITLEMENT_PURPOSE_VALUE_ASSIGNMENT
            - APP_ENTITLEMENT_PURPOSE_VALUE_PERMISSION
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        requestSchemaId:
          description: The ID of the request schema associated with this app entitlement.
          readOnly: false
          type: string
        revokePolicyId:
          description: >-
            The ID of the policy that will be used for revoke tickets related to
            the app entitlement
          readOnly: false
          type: string
        riskLevelValueId:
          description: The riskLevelValueId field.
          readOnly: false
          type: string
        slug:
          description: >-
            The slug is displayed as an oval next to the name in the frontend of
            C1, it tells you what permission the entitlement grants. See
            https://www.conductorone.com/docs/product/admin/entitlements/
          readOnly: false
          type: string
        sourceConnectorIds:
          additionalProperties:
            type: string
          description: Map to tell us which connector the entitlement came from.
          readOnly: false
          type: object
        systemBuiltin:
          description: This field indicates if this is a system builtin entitlement.
          readOnly: true
          type: boolean
        updatedAt:
          format: date-time
          readOnly: true
          type: string
        userEditedMask:
          nullable: true
          readOnly: false
          type: string
      title: App Entitlement
      type: object
      x-speakeasy-entity: Custom App Entitlement
      x-speakeasy-name-override: AppEntitlement
    c1.api.app.v1.AppEntitlementAutomation:
      description: >
        The AppEntitlementAutomation message.


        This message contains a oneof named conditions. Only a single field of
        the following list may be set at a time:
          - none
          - entitlements
          - cel
          - basic
      properties:
        appEntitlementId:
          description: The unique ID for the App Entitlement.
          readOnly: true
          type: string
        appId:
          description: The ID of the app that is associated with the app entitlement.
          readOnly: true
          type: string
        basic:
          $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementAutomationRuleBasic'
        cel:
          $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementAutomationRuleCEL'
        createdAt:
          format: date-time
          readOnly: true
          type: string
        deletedAt:
          format: date-time
          readOnly: true
          type: string
        description:
          description: The description of the app entitlement.
          readOnly: false
          type: string
        displayName:
          description: The display name of the app entitlement.
          readOnly: false
          type: string
        entitlements:
          $ref: >-
            #/components/schemas/c1.api.app.v1.AppEntitlementAutomationRuleEntitlement
        lastRunStatus:
          $ref: >-
            #/components/schemas/c1.api.app.v1.AppEntitlementAutomationLastRunStatus
        none:
          $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementAutomationRuleNone'
        updatedAt:
          format: date-time
          readOnly: true
          type: string
      title: App Entitlement Automation
      type: object
      x-speakeasy-entity: App Entitlement Automation
      x-speakeasy-name-override: AppEntitlementAutomation
    c1.api.app.v1.AppEntitlementAutomationLastRunStatus:
      description: The AppEntitlementAutomationLastRunStatus message.
      properties:
        errorMessage:
          description: The errorMessage field.
          readOnly: true
          type: string
        lastCompletedAt:
          format: date-time
          readOnly: true
          type: string
        status:
          description: The status field.
          enum:
            - APP_ENTITLEMENT_AUTOMATION_RUN_STATUS_UNSPECIFIED
            - APP_ENTITLEMENT_AUTOMATION_RUN_STATUS_SUCCESS
            - APP_ENTITLEMENT_AUTOMATION_RUN_STATUS_FAILED
            - APP_ENTITLEMENT_AUTOMATION_RUN_STATUS_IN_PROGRESS
          readOnly: true
          type: string
          x-speakeasy-unknown-values: allow
      title: App Entitlement Automation Last Run Status
      type: object
      x-speakeasy-name-override: AppEntitlementAutomationLastRunStatus
    c1.api.app.v1.AppEntitlementAutomationRuleBasic:
      description: The AppEntitlementAutomationRuleBasic message.
      nullable: true
      properties:
        expression:
          description: The expression field.
          readOnly: false
          type: string
      title: App Entitlement Automation Rule Basic
      type: object
      x-speakeasy-name-override: AppEntitlementAutomationRuleBasic
    c1.api.app.v1.AppEntitlementAutomationRuleCEL:
      description: The AppEntitlementAutomationRuleCEL message.
      nullable: true
      properties:
        expression:
          description: The expression field.
          readOnly: false
          type: string
      title: App Entitlement Automation Rule Cel
      type: object
      x-speakeasy-name-override: AppEntitlementAutomationRuleCEL
    c1.api.app.v1.AppEntitlementAutomationRuleEntitlement:
      description: The AppEntitlementAutomationRuleEntitlement message.
      nullable: true
      properties:
        entitlementRefs:
          description: The entitlementRefs field.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef'
          nullable: true
          readOnly: false
          type: array
      title: App Entitlement Automation Rule Entitlement
      type: object
      x-speakeasy-name-override: AppEntitlementAutomationRuleEntitlement
    c1.api.app.v1.AppEntitlementAutomationRuleNone:
      description: The AppEntitlementAutomationRuleNone message.
      nullable: true
      title: App Entitlement Automation Rule None
      type: object
      x-speakeasy-

# --- truncated at 32 KB (918 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/conductorone/refs/heads/main/openapi/conductorone-openapi-original.yml