ConductorOne App Entitlement API

openapi: 3.2.0
info:
  description: The ConductorOne API is a HTTP API for managing ConductorOne resources.
  title: ConductorOne Access Conflict App Entitlement API
  version: 0.1.0-alpha
servers:
- description: The ConductorOne API server for the current tenant.
  url: https://{tenantDomain}.conductor.one
  variables:
    tenantDomain:
      default: example
      description: The domain of the tenant to use for this request.
security:
- bearerAuth: []
  oauth: []
tags:
- name: App Entitlement
paths:
  /api/v1/apps/{app_id}/entitlements:
    get:
      description: List app entitlements associated with an app.
      operationId: c1.api.app.v1.AppEntitlements.List
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ListAppEntitlementsResponse'
          description: The ListAppEntitlementsResponse message contains a list of results and a nextPageToken if applicable.
      summary: List
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: List
    post:
      description: Invokes the c1.api.app.v1.AppEntitlements.Create method.
      operationId: c1.api.app.v1.AppEntitlements.Create
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.CreateAppEntitlementRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.CreateAppEntitlementResponse'
          description: Successful response
      summary: Create
      tags:
      - App Entitlement
      x-speakeasy-entity-operation:
        terraform-resource: Custom App Entitlement#create
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: Create
  /api/v1/apps/{app_id}/entitlements/{app_entitlement_id}/add-manual-user:
    post:
      description: Invokes the c1.api.app.v1.AppEntitlements.AddManuallyManagedMembers method.
      operationId: c1.api.app.v1.AppEntitlements.AddManuallyManagedMembers
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_entitlement_id
        required: true
        schema:
          description: The appEntitlementId field.
          readOnly: false
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.AddManuallyManagedUsersRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ManuallyManagedUsersResponse'
          description: Successful response
      summary: Add Manually Managed Members
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: AddManuallyManagedMembers
  /api/v1/apps/{app_id}/entitlements/{app_entitlement_id}/grants:
    get:
      description: Search app entitlements, include app users, users, expires, discovered.
      operationId: c1.api.app.v1.AppEntitlementSearchService.SearchAppEntitlementsWithExpired
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_entitlement_id
        required: true
        schema:
          description: The appEntitlementId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.SearchAppEntitlementsWithExpiredResponse'
          description: The SearchAppEntitlementsWithExpiredResponse message contains a list of results and a nextPageToken if applicable.
      summary: Search App Entitlements With Expired
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlementSearch
      x-speakeasy-name-override: SearchAppEntitlementsWithExpired
  /api/v1/apps/{app_id}/entitlements/{app_entitlement_id}/remove-membership:
    delete:
      description: Invokes the c1.api.app.v1.AppEntitlements.RemoveEntitlementMembership method.
      operationId: c1.api.app.v1.AppEntitlements.RemoveEntitlementMembership
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_entitlement_id
        required: true
        schema:
          description: The appEntitlementId field.
          readOnly: false
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.RemoveEntitlementMembershipRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.RemoveEntitlementMembershipResponse'
          description: Successful response
      summary: Remove Entitlement Membership
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: RemoveEntitlementMembership
  /api/v1/apps/{app_id}/entitlements/{app_entitlement_id}/users:
    get:
      deprecated: true
      description: List the users, as AppEntitlementUsers objects, of an app entitlement.
      operationId: c1.api.app.v1.AppEntitlements.ListUsers
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_entitlement_id
        required: true
        schema:
          description: The appEntitlementId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ListAppEntitlementUsersResponse'
          description: The ListAppEntitlementUsersResponse message contains a list of results and a nextPageToken if applicable.
      summary: List Users
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: ListUsers
  /api/v1/apps/{app_id}/entitlements/{id}:
    delete:
      description: Invokes the c1.api.app.v1.AppEntitlements.Delete method.
      operationId: c1.api.app.v1.AppEntitlements.Delete
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: id
        required: true
        schema:
          description: The id field.
          readOnly: false
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.DeleteAppEntitlementRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.DeleteAppEntitlementResponse'
          description: Successful response
      summary: Delete
      tags:
      - App Entitlement
      x-speakeasy-entity-operation:
        terraform-resource: Custom App Entitlement#delete
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: Delete
    get:
      description: Get an app entitlement by ID.
      operationId: c1.api.app.v1.AppEntitlements.Get
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: id
        required: true
        schema:
          description: The id field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.GetAppEntitlementResponse'
          description: The get app entitlement response returns an entitlement view containing paths in the expanded array for the objects expanded as indicated by the expand mask in the request.
      summary: Get
      tags:
      - App Entitlement
      x-speakeasy-entity-operation:
        terraform-datasource: null
        terraform-resource: Custom App Entitlement#read
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: Get
    post:
      description: Update an app entitlement by ID.
      operationId: c1.api.app.v1.AppEntitlements.Update
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The ID of the app that is associated with the app entitlement.
          readOnly: false
          type: string
      - in: path
        name: id
        required: true
        schema:
          description: The unique ID for the App Entitlement.
          readOnly: true
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.UpdateAppEntitlementRequestInput'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.UpdateAppEntitlementResponse'
          description: Successful response
      summary: Update
      tags:
      - App Entitlement
      x-speakeasy-entity-operation:
        terraform-resource: Custom App Entitlement#update
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: Update
  /api/v1/apps/{app_id}/entitlements/resource_types/{app_resource_type_id}/resources/{app_resource_id}:
    get:
      description: List app entitlements associated with an app resource.
      operationId: c1.api.app.v1.AppEntitlements.ListForAppResource
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_resource_type_id
        required: true
        schema:
          description: The appResourceTypeId field.
          readOnly: false
          type: string
      - in: path
        name: app_resource_id
        required: true
        schema:
          description: The appResourceId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ListAppEntitlementsResponse'
          description: The ListAppEntitlementsResponse message contains a list of results and a nextPageToken if applicable.
      summary: List For App Resource
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: ListForAppResource
  /api/v1/apps/{app_id}/entitlements/users/{app_user_id}:
    get:
      description: List app entitlements associated with an app user.
      operationId: c1.api.app.v1.AppEntitlements.ListForAppUser
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_user_id
        required: true
        schema:
          description: The appUserId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ListAppEntitlementsResponse'
          description: The ListAppEntitlementsResponse message contains a list of results and a nextPageToken if applicable.
      summary: List For App User
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlements
      x-speakeasy-name-override: ListForAppUser
  /api/v1/search/apps/{app_id}/entitlements/users/{app_user_id}:
    get:
      description: Invokes the c1.api.app.v1.AppEntitlementSearchService.SearchAppEntitlementsForAppUser method.
      operationId: c1.api.app.v1.AppEntitlementSearchService.SearchAppEntitlementsForAppUser
      parameters:
      - in: path
        name: app_id
        required: true
        schema:
          description: The appId field.
          readOnly: false
          type: string
      - in: path
        name: app_user_id
        required: true
        schema:
          description: The appUserId field.
          readOnly: false
          type: string
      - in: query
        name: page_size
        schema:
          description: The pageSize field.
          format: int32
          readOnly: false
          type: integer
      - in: query
        name: page_token
        schema:
          description: The pageToken field.
          readOnly: false
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.ListAppEntitlementsResponse'
          description: The ListAppEntitlementsResponse message contains a list of results and a nextPageToken if applicable.
      summary: Search App Entitlements For App User
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlementSearch
      x-speakeasy-name-override: SearchAppEntitlementsForAppUser
  /api/v1/search/entitlements:
    post:
      description: Search app entitlements based on filters specified in the request body.
      operationId: c1.api.app.v1.AppEntitlementSearchService.Search
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementSearchServiceSearchRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementSearchServiceSearchResponse'
          description: Successful response
      summary: Search
      tags:
      - App Entitlement
      x-speakeasy-entity-operation:
        terraform-datasource:
        - App Entitlement#read
        - App Entitlements#read
        terraform-resource: null
      x-speakeasy-group: AppEntitlementSearch
      x-speakeasy-name-override: Search
      x-speakeasy-pagination:
        inputs:
        - in: requestBody
          name: pageToken
          type: cursor
        outputs:
          nextCursor: $.nextPageToken
        type: cursor
  /api/v1/search/grants:
    post:
      description: Invokes the c1.api.app.v1.AppEntitlementSearchService.SearchGrants method.
      operationId: c1.api.app.v1.AppEntitlementSearchService.SearchGrants
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementSearchServiceSearchGrantsRequest'
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementSearchServiceSearchGrantsResponse'
          description: Successful response
      summary: Search Grants
      tags:
      - App Entitlement
      x-speakeasy-group: AppEntitlementSearch
      x-speakeasy-name-override: SearchGrants
components:
  schemas:
    c1.api.search.v1.FacetRange:
      description: The FacetRange message.
      properties:
        count:
          description: The count of items in the range.
          format: int64
          readOnly: false
          type: string
        displayName:
          description: The display name of the range.
          readOnly: false
          type: string
        from:
          description: The starting value of the range.
          format: int64
          readOnly: false
          type: string
        iconUrl:
          description: The icon of the range.
          readOnly: false
          type: string
        to:
          description: The ending value of the range.
          format: int64
          readOnly: false
          type: string
      title: Facet Range
      type: object
      x-speakeasy-name-override: FacetRange
    c1.api.app.v1.CreateAppEntitlementRequestInput:
      description: "The CreateAppEntitlementRequest message.\n\nThis message contains a oneof named max_grant_duration. Only a single field of the following list may be set at a time:\n  - durationUnset\n  - durationGrant\n"
      properties:
        alias:
          description: The alias field.
          readOnly: false
          type: string
        appEntitlementOwnerIds:
          description: The appEntitlementOwnerIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        appResourceId:
          description: The appResourceId field.
          readOnly: false
          type: string
        appResourceTypeId:
          description: The appResourceTypeId field.
          readOnly: false
          type: string
        certifyPolicyId:
          description: The certifyPolicyId field.
          readOnly: false
          type: string
        complianceFrameworkValueIds:
          description: The complianceFrameworkValueIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        description:
          description: The description field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        durationGrant:
          format: duration
          readOnly: false
          type: string
        durationUnset:
          nullable: true
          readOnly: false
          type: object
        emergencyGrantEnabled:
          description: The emergencyGrantEnabled field.
          readOnly: false
          type: boolean
        emergencyGrantPolicyId:
          description: The emergencyGrantPolicyId field.
          readOnly: false
          type: string
        expandMask:
          $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementExpandMask'
        grantPolicyId:
          description: The grantPolicyId field.
          readOnly: false
          type: string
        matchBatonId:
          description: If supplied, it's implied that the entitlement is created before sync and needs to be merged with connector entitlement.
          readOnly: false
          type: string
        overrideAccessRequestsDefaults:
          description: The overrideAccessRequestsDefaults field.
          readOnly: false
          type: boolean
        provisionPolicy:
          $ref: '#/components/schemas/c1.api.policy.v1.ProvisionPolicy'
        purpose:
          description: The purpose field.
          enum:
          - APP_ENTITLEMENT_PURPOSE_VALUE_UNSPECIFIED
          - APP_ENTITLEMENT_PURPOSE_VALUE_ASSIGNMENT
          - APP_ENTITLEMENT_PURPOSE_VALUE_PERMISSION
          readOnly: false
          type: string
          x-speakeasy-unknown-values: allow
        revokePolicyId:
          description: The revokePolicyId field.
          readOnly: false
          type: string
        riskLevelValueId:
          description: The riskLevelValueId field.
          readOnly: false
          type: string
        slug:
          description: The slug field.
          readOnly: false
          type: string
      required:
      - displayName
      title: Create App Entitlement Request
      type: object
      x-speakeasy-name-override: CreateAppEntitlementRequest
    c1.api.app.v1.SearchAppEntitlementsWithExpiredResponse:
      description: The SearchAppEntitlementsWithExpiredResponse message contains a list of results and a nextPageToken if applicable.
      properties:
        list:
          description: The list field.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementWithExpired'
          nullable: true
          readOnly: false
          type: array
        nextPageToken:
          description: The nextPageToken field.
          readOnly: false
          type: string
      title: Search App Entitlements With Expired Response
      type: object
      x-speakeasy-name-override: SearchAppEntitlementsWithExpiredResponse
    c1.api.search.v1.FacetRangeItem:
      description: The FacetRangeItem message.
      nullable: true
      properties:
        ranges:
          description: An array of facet ranges.
          items:
            $ref: '#/components/schemas/c1.api.search.v1.FacetRange'
          nullable: true
          readOnly: false
          type: array
      title: Facet Range Item
      type: object
      x-speakeasy-name-override: FacetRangeItem
    c1.api.policy.v1.ManualProvision:
      description: Manual provisioning indicates that a human must intervene for the provisioning of this step.
      nullable: true
      properties:
        instructions:
          description: This field indicates a text body of instructions for the provisioner to indicate.
          readOnly: false
          type: string
        userIds:
          description: An array of users that are required to provision during this step.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
      title: Manual Provision
      type: object
      x-speakeasy-name-override: ManualProvision
    c1.api.policy.v1.ConnectorProvision:
      description: "Indicates that a connector should perform the provisioning. This object has no fields.\n\nThis message contains a oneof named provision_type. Only a single field of the following list may be set at a time:\n  - defaultBehavior\n  - account\n  - deleteAccount\n"
      nullable: true
      properties:
        account:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.AccountProvision'
        defaultBehavior:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.DefaultBehavior'
        deleteAccount:
          $ref: '#/components/schemas/c1.api.policy.v1.ConnectorProvision.DeleteAccount'
      title: Connector Provision
      type: object
      x-speakeasy-name-override: ConnectorProvision
    c1.api.app.v1.AppEntitlementUserView:
      description: The AppEntitlementUserView (aka grant view) describes the relationship between an app user and an entitlement. They have more recently been referred to as grants.
      properties:
        appEntitlementUserBindingCreatedAt:
          format: date-time
          readOnly: true
          type: string
        appEntitlementUserBindingDeprovisionAt:
          format: date-time
          readOnly: true
          type: string
        appUser:
          $ref: '#/components/schemas/c1.api.app.v1.AppUserView'
        grantSources:
          description: List of sources for the grant, ie. groups, roles, etc.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef'
          nullable: true
          readOnly: false
          type: array
      title: App Entitlement User View
      type: object
      x-speakeasy-name-override: AppEntitlementUserView
    c1.api.app.v1.AppEntitlementSearchServiceSearchRequest:
      description: Search app entitlements by a variety of filters.
      properties:
        accessReviewId:
          description: Search for app entitlements that are being reviewed as part of this access review campaign.
          readOnly: false
          type: string
        alias:
          description: Search for app entitlements that have this alias (exact match).
          readOnly: false
          type: string
        appIds:
          description: Search for app entitlements contained in any of these apps.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        appUserIds:
          description: Search for app entitlements that are granted to any of these app user ids.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        complianceFrameworkIds:
          description: Search for app entitlements that are part of these compliace frameworks.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
        excludeAppIds:
          description: Exclude app entitlements from the results that are in these app IDs.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        excludeAppUserIds:
          description: Exclude app entitlements from the results that these app users have granted.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        excludeImmutable:
          description: The excludeImmutable field.
          readOnly: false
          type: boolean
        excludeResourceTypeIds:
          description: The excludeResourceTypeIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        excludedEntitlementRefs:
          description: The excludedEntitlementRefs field.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef'
          nullable: true
          readOnly: false
          type: array
        expandMask:
          $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementExpandMask'
        includeDeleted:
          description: Include deleted app entitlements, this includes app entitlements that have a deleted parent object (app, app resource, app resource type)
          readOnly: false
          type: boolean
        isAutomated:
          description: The isAutomated field.
          readOnly: false
          type: boolean
        membershipType:
          description: The membershipType field.
          items:
            enum:
            - APP_ENTITLEMENT_MEMBERSHIP_TYPE_UNSPECIFIED
            - APP_ENTITLEMENT_MEMBERSHIP_TYPE_MEMBER
            - APP_ENTITLEMENT_MEMBERSHIP_TYPE_OWNER
            - APP_ENTITLEMENT_MEMBERSHIP_TYPE_EXCLUSION
            - APP_ENTITLEMENT_MEMBERSHIP_TYPE_ADMIN
            type: string
            x-speakeasy-unknown-values: allow
          nullable: true
          readOnly: false
          type: array
        onlyGetExpiring:
          description: Restrict results to only those who have expiring app entitlement user bindings.
          readOnly: false
          type: boolean
        pageSize:
          description: The pageSize where 0 <= pageSize <= 100. Values < 10 will be set to 10. A value of 0 returns the default page size (currently 25)
          format: int32
          readOnly: false
          type: integer
        pageToken:
          description: The pageToken field.
          readOnly: false
          type: string
        policyRefs:
          description: Search for app entitlements that use any of these policies.
          items:
            $ref: '#/components/schemas/c1.api.policy.v1.PolicyRef'
          nullable: true
          readOnly: false
          type: array
        query:
          description: Query the app entitlements with a fuzzy search on display name and description.
          readOnly: false
          type: string
        refs:
          description: The refs field.
          items:
            $ref: '#/components/schemas/c1.api.app.v1.AppEntitlementRef'
          nullable: true
          readOnly: false
          type: array
        resourceIds:
          description: Search for app entitlements that belongs to these resources.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        resourceTraitIds:
          description: The resourceTraitIds field.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        resourceTypeIds:
          description: Search for app entitlements that are for items with resources types that have matching names. Example names are "group", "role", and "app".
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        riskLevelIds:
          description: Search for app entitlements with these risk levels.
          items:
            type: string
          nullable: true
          readOnly: false
          type: array
        sourceConnectorId:
          description: The sourceConnectorId field.
          readOnly: false
          type: string
      title: App Entitlement Search Service Search Request
      type: object
      x-speakeasy-name-override: AppEntitlementSearchServiceSearchRequest
    c1.api.policy.v1.ActionProvision:
      description: This provision step indicates that account lifecycle action should be called to provision this entitlement.
      nullable: true
      properties:
        actionName:
          description: The actionName field.
          readOnly: false
          type: string
        appId:
          description: The appId field.
          readOnly: false
          type: string
        connectorId:
          description: The connectorId field.
          readOnly: false
          type: string
        displayName:
          description: The displayName field.
          readOnly: false
          type: string
      title: Action Provision
      type: object
      x-speakeasy-name-override: ActionProvision
    c1.api.app.v1.AppUserView:
      description: The AppUserView contains an app user as well as paths for apps, identity users, and last usage in expanded arrays.
      properties:
        appPath:
          description: JSONPATH expression indicating where the app is expanded in expanded arrays indicated in the request.
          readOnly: false
          type: string
        appUser:
          $ref: '#/components/schemas/c1.api.app.v1.AppUser'
        identityUserPath:
          description: JSONPATH expression indicating where the identity user is expanded in expanded arrays indicated in the request.
          readO

# --- truncated at 32 KB (77 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/conductorone/refs/heads/main/openapi/conductorone-app-entitlement-api-openapi.yml