# Lumos Access Reviews API

**Canonical:** https://apis.io/apis/lumos/lumos-access-reviews-api/  
**Provider:** Lumos — https://apis.io/providers/lumos/  
**Base URL:** https://api.lumos.com  
**Documentation:** https://developers.lumos.com/docs/rest-api

Lumos Access Reviews API is one of 10 APIs that [Lumos](https://apis.io/providers/lumos/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Access Reviews. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a getting-started guide, and authentication docs.

Create and manage access review campaigns — scheduled reviews of who has access to what across your connected apps. **Typical workflow for creating a review:** 1. `GET /apps` — find the domain app UUIDs you want to review. 2. `GET /access_reviews/scope_options?domain_app_id={id}` — discover available scope filters (employment status, team, last login, etc.). Each returned `items` entry is a ready-to-POST `scope_filters` payload; datetime and custom-attribute groups instead expose a `filter_input_template`. 3. `POST /access_reviews` with `apps` (optionally with `scope_filters` per app) — creates the campaign. 4. `GET /access_reviews/{id}` — poll until `status` transitions from `IN_PREPARATION` to `IN_PROGRESS`. **After creation:** - `POST /access_reviews/{id}/apps` — add more apps while `status != COMPLETED`. - `PATCH /access_reviews/{id}` — update name / deadline / owner, or per-ARDA `scope_filters` and removal action. - `DELETE /access_reviews/{id}` — soft-delete the whole campaign. - `DELETE /access_reviews/{id}/apps/{arda_id}` — soft-delete a single app from the campaign. All endpoints require an API token with the `access_reviews.create` or `access_reviews.view` permission (Access Review Administrator or App Admin role).

## Operations (8)

| Method | Path | Summary |
|---|---|---|
| POST | `/access_reviews` | Create Access Review |
| GET | `/access_reviews` | List Access Reviews |
| POST | `/access_reviews/{access_review_id}/apps` | Add Apps To Access Review |
| DELETE | `/access_reviews/{access_review_id}` | Delete Access Review |
| GET | `/access_reviews/{access_review_id}` | Get Access Review |
| PATCH | `/access_reviews/{access_review_id}` | Update Access Review |
| DELETE | `/access_reviews/{access_review_id}/apps/{arda_id}` | Delete Access Review App |
| GET | `/access_reviews/scope_options` | Get Scope Options Endpoint |

## Machine-readable artifacts (4)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/lumos/refs/heads/main/openapi/lumos-access-reviews-api-openapi.yml
- **Documentation** — https://developers.lumos.com/reference/lumos-api
- **GettingStarted** — https://developers.lumos.com/docs/quick-start
- **Authentication** — https://developers.lumos.com/docs/rest-api

## Other Lumos APIs (9)

- [Lumos Connector SDK](https://apis.io/apis/lumos/connector-sdk/)
- [Lumos Tasks API](https://apis.io/apis/lumos/lumos-tasks-api/)
- [Lumos Core API](https://apis.io/apis/lumos/lumos-core-api/)
- [Lumos Integration Webhooks API](https://apis.io/apis/lumos/lumos-integration-webhooks-api/)
- [Lumos Knowledge API](https://apis.io/apis/lumos/lumos-knowledge-api/)
- [Lumos Lifecycle Management API](https://apis.io/apis/lumos/lumos-lifecycle-management-api/)
- [Lumos Meta API](https://apis.io/apis/lumos/lumos-meta-api/)
- [Lumos Vendor Management API](https://apis.io/apis/lumos/lumos-vendor-management-api/)
- [Lumos App Store API](https://apis.io/apis/lumos/lumos-app-store-api/)

## Tags

Access Reviews

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/lumos/lumos-access-reviews-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/lumos/.