Oracle Access Request API

openapi: 3.2.0
info:
  description: 'Use the Managed Access API to approve access requests, create and manage templates, and manage resource approval settings. For more information, see [Managed Access Overview](https://docs.oracle.com/iaas/Content/managed-access/home.htm).


    Use the table of contents and search tool to explore the Managed Access API.

    '
  title: Managed Access Access Request API
  version: '20220126'
  x-provenance:
    method: harvested
    first_party: true
    publisher: Oracle
    source: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml
    harvested: '2026-08-04'
    note: Published by Oracle as the contract for the Managed Access API OCI service and stored verbatim; API Evangelist added only this provenance block.
  x-evidence:
  - url: https://docs.oracle.com/en-us/iaas/api/specs/index.json
    what: Oracle's own index of every OCI service specification
  - url: https://docs.oracle.com/en-us/iaas/api/specs/f397c9292e6f977d1885091f8a6e9a9c3cdcb882c49d89bc55720e8eec0c02d1.yaml
    what: the harvested document for Managed Access API
servers:
- url: http://127.0.0.1/20220126
- url: https://127.0.0.1/20220126
tags:
- name: accessRequest
paths:
  /accessRequests:
    get:
      description: 'Retrieves a list of AccessRequestSummary objects in a compartment.

        '
      operationId: ListAccessRequests
      parameters:
      - $ref: '#/components/parameters/RequestIdHeader'
      - $ref: '#/components/parameters/LockboxIdOptionalQueryParam'
      - $ref: '#/components/parameters/IdentifierQueryParam'
      - $ref: '#/components/parameters/DisplayNameQueryParam'
      - $ref: '#/components/parameters/AccessRequestLifecycleStateQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerOptionalQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerIdOptionalQueryParam'
      - $ref: '#/components/parameters/RequestorIdentifierOptionalQueryParam'
      - $ref: '#/components/parameters/PaginationLimitQueryParam'
      - $ref: '#/components/parameters/PaginationTokenQueryParam'
      - $ref: '#/components/parameters/SortOrderQueryParam'
      - $ref: '#/components/parameters/SortByQueryParam'
      - $ref: '#/components/parameters/TimeCreatedAfterQueryParam'
      - $ref: '#/components/parameters/TimeCreatedBeforeQueryParam'
      responses:
        200:
          description: A page of AccessRequestSummary objects.
          headers:
            opc-next-page:
              description: 'For pagination of a list of items. When paging through a list, if this header appears in the response,

                then a partial list might have been returned. Include this value as the `page` parameter for the

                subsequent GET request to get the next batch of items.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessRequestCollection'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Retrieves a list of all access requests in a compartment.
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessRequestCollection'
    post:
      description: 'Creates a new access request.

        '
      operationId: CreateAccessRequest
      parameters:
      - $ref: '#/components/parameters/RetryTokenHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        201:
          description: Successfully accepted the request. The access request will be created.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            location:
              description: 'this contains the full URI for the get request, e.g. "https://iaas.us-phoenix-1.oraclecloud.com/20210331/lockbox/<some-ocid>"

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
            opc-work-request-id:
              description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessRequest'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        409:
          $ref: '#/components/responses/409'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Creates a new access request.
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessRequest'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateAccessRequestDetails'
        description: Details for the new access request.
        required: true
  /accessRequests/actions/export:
    post:
      description: 'Exports a list of AccessRequestSummary objects within a compartment and during a specified time range in text format. You can filter the results by problem severity.

        '
      operationId: ExportAccessRequests
      parameters:
      - $ref: '#/components/parameters/RequestIdHeader'
      - $ref: '#/components/parameters/IdentifierQueryParam'
      - $ref: '#/components/parameters/DisplayNameQueryParam'
      - $ref: '#/components/parameters/AccessRequestLifecycleStateQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerOptionalQueryParam'
      - $ref: '#/components/parameters/LockboxPartnerIdOptionalQueryParam'
      - $ref: '#/components/parameters/RequestorIdentifierOptionalQueryParam'
      - $ref: '#/components/parameters/PaginationLimitQueryParam'
      - $ref: '#/components/parameters/PaginationTokenQueryParam'
      - $ref: '#/components/parameters/SortOrderQueryParam'
      - $ref: '#/components/parameters/SortByQueryParam'
      responses:
        200:
          description: Successfully returned a string in binary format of all Access Requests for the lockbox in the compartment and in the time range filter.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            text/csv:
              schema:
                format: binary
                type: string
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Get the full list of AccessRequests in a compartment in binary format
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessRequestCollection'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ExportAccessRequestsDetails'
              description: Information on which scan results to export as binary file
        description: Exports the list of access requests for given date range in text format
        required: true
  /accessRequests/{accessRequestId}:
    get:
      description: Retrieves an access request identified by the access request ID.
      operationId: GetAccessRequest
      parameters:
      - $ref: '#/components/parameters/AccessRequestIdentifierPathParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: Successfully retrieved the access request.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessRequest'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Retrieves an access request.
      tags:
      - accessRequest
  /accessRequests/{accessRequestId}/accessMaterials:
    get:
      description: 'Retrieves the access credential/material associated with the access request.

        '
      operationId: GetAccessMaterials
      parameters:
      - $ref: '#/components/parameters/AccessRequestIdentifierPathParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: Successfully accepted the request. The credential will be returned.
          headers:
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessMaterials'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        409:
          $ref: '#/components/responses/409'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Retrieves the associated access details.
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessMaterials'
  /accessRequests/{accessRequestId}/actions/handle:
    post:
      description: Handle the AccessRequest
      operationId: HandleAccessRequest
      parameters:
      - $ref: '#/components/parameters/AccessRequestIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RetryTokenHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        202:
          description: Accepted the request. The AccessRequest will be handled.
          headers:
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
            opc-work-request-id:
              description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status.

                '
              schema:
                type: string
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        405:
          $ref: '#/components/responses/405'
        409:
          $ref: '#/components/responses/409'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Handle the AccessRequest identified by the id
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessRequest'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/HandleAccessRequestDetails'
        description: The details of handling access request
        required: true
  /accessRequests/{accessRequestId}/actions/remind:
    post:
      description: Remind the AccessRequest
      operationId: RemindAccessRequest
      parameters:
      - $ref: '#/components/parameters/AccessRequestIdentifierPathParam'
      - $ref: '#/components/parameters/IfMatchHeader'
      - $ref: '#/components/parameters/RetryTokenHeader'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        202:
          description: Accepted the request. The AccessRequest will be reminded.
          headers:
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
            opc-work-request-id:
              description: 'Unique Oracle-assigned identifier for the asynchronous work. You can use this to query its status.

                '
              schema:
                type: string
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        405:
          $ref: '#/components/responses/405'
        409:
          $ref: '#/components/responses/409'
        412:
          $ref: '#/components/responses/412'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Remind the AccessRequest and resend notifications to pending approvers
      tags:
      - accessRequest
      x-related-resource: '#/definitions/AccessRequest'
  /accessRequests/{accessRequestId}/internal:
    get:
      description: Retrieves an access request identified by the access request ID for internal use.
      operationId: GetAccessRequestInternal
      parameters:
      - $ref: '#/components/parameters/AccessRequestIdentifierPathParam'
      - $ref: '#/components/parameters/RequestIdHeader'
      responses:
        200:
          description: Successfully retrieved the access request.
          headers:
            etag:
              description: 'For optimistic concurrency control. See `if-match`.

                '
              schema:
                type: string
            opc-request-id:
              description: 'Unique Oracle-assigned identifier for the request. If you need to contact

                Oracle about a particular request, please provide the request ID.

                '
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AccessRequestExt'
        400:
          $ref: '#/components/responses/400'
        401:
          $ref: '#/components/responses/401'
        404:
          $ref: '#/components/responses/404'
        429:
          $ref: '#/components/responses/429'
        500:
          $ref: '#/components/responses/500'
        default:
          $ref: '#/components/responses/default'
      summary: Retrieves an access request for internal use.
      tags:
      - accessRequest
components:
  parameters:
    LockboxPartnerOptionalQueryParam:
      description: The name of the lockbox partner.
      in: query
      name: lockboxPartner
      x-default-description: 'null'
      x-obmcs-top-level-enum: '#/definitions/LockboxPartner'
      schema:
        type: string
        enum:
        - FAAAS
        - CANARY
    PaginationTokenQueryParam:
      description: A token representing the position at which to start retrieving results. This must come from the `opc-next-page` header field of a previous response.
      in: query
      name: page
      x-default-description: 'null'
      schema:
        type: string
        minLength: 1
    SortByQueryParam:
      description: 'The field to sort by. Only one sort order may be provided. Default order for timeCreated is descending. Default order for displayName is ascending.

        '
      in: query
      name: sortBy
      schema:
        type: string
        enum:
        - timeCreated
        - displayName
        - id
        default: timeCreated
    IdentifierQueryParam:
      description: A generic Id query param used to filter lockbox, access request and approval template by Id.
      in: query
      name: id
      x-default-description: 'null'
      schema:
        type: string
        maxLength: 255
        minLength: 1
    AccessRequestIdentifierPathParam:
      description: The unique identifier (OCID) of the access request.
      in: path
      name: accessRequestId
      required: true
      schema:
        type: string
    TimeCreatedAfterQueryParam:
      description: Date and time on or after which Access Requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339)
      in: query
      name: timeCreatedAfter
      x-default-description: 'null'
      schema:
        type: string
        format: date-time
    TimeCreatedBeforeQueryParam:
      description: Date and time on or before which Access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339)
      in: query
      name: timeCreatedBefore
      x-default-description: 'null'
      schema:
        type: string
        format: date-time
    LockboxIdOptionalQueryParam:
      description: The unique identifier (OCID) of the associated lockbox.
      in: query
      name: lockboxId
      x-default-description: 'null'
      schema:
        type: string
        maxLength: 255
        minLength: 1
    IfMatchHeader:
      description: 'For optimistic concurrency control. In the PUT or DELETE call

        for a resource, set the `if-match` parameter to the value of the

        etag from a previous GET or POST response for that resource.

        The resource will be updated or deleted only if the etag you

        provide matches the resource''s current etag value.

        '
      in: header
      name: if-match
      required: false
      schema:
        type: string
    PaginationLimitQueryParam:
      description: The maximum number of items to return.
      in: query
      name: limit
      schema:
        type: integer
        default: 10
        maximum: 1000
        minimum: 1
    SortOrderQueryParam:
      description: The sort order to use, either 'ASC' or 'DESC'.
      in: query
      name: sortOrder
      x-default-description: 'The default value depends upon `sortBy`, and

        in general is ''DESC'' when sorting by time and ''ASC'' otherwise.

        '
      x-obmcs-top-level-enum: '#/definitions/SortOrder'
      schema:
        type: string
        enum:
        - ASC
        - DESC
    LockboxPartnerIdOptionalQueryParam:
      description: The ID of the partner.
      in: query
      name: partnerId
      x-default-description: 'null'
      schema:
        type: string
    RetryTokenHeader:
      description: 'A token that uniquely identifies a request so it can be retried in case of a timeout or

        server error without risk of executing that same action again. Retry tokens expire after 24

        hours, but can be invalidated before then due to conflicting operations. For example, if a resource

        has been deleted and purged from the system, then a retry of the original creation request

        might be rejected.

        '
      in: header
      name: opc-retry-token
      required: false
      schema:
        type: string
        maxLength: 64
        minLength: 1
    RequestorIdentifierOptionalQueryParam:
      description: The unique identifier (OCID) of the requestor in which to list resources.
      in: query
      name: requestorId
      x-default-description: 'null'
      schema:
        type: string
        maxLength: 255
        minLength: 1
    AccessRequestLifecycleStateQueryParam:
      description: A filter to return only resources their lifecycleState matches the given lifecycleState.
      in: query
      name: lifecycleState
      x-default-description: 'null'
      x-obmcs-enumref: '#/definitions/AccessRequest/lifecycleState'
      schema:
        type: string
    DisplayNameQueryParam:
      description: A filter to return only resources that match the entire display name given.
      in: query
      name: displayName
      x-default-description: 'null'
      schema:
        type: string
        maxLength: 255
        minLength: 1
    RequestIdHeader:
      description: The client request ID for tracing.
      in: header
      name: opc-request-id
      schema:
        type: string
  schemas:
    Error:
      description: Error Information.
      properties:
        code:
          description: A short error code that defines the error, meant for programmatic parsing.
          type: string
        message:
          description: A human-readable error string.
          type: string
      required:
      - code
      - message
    AccessRequestSummary:
      description: Summary information for an access request.
      properties:
        accessDuration:
          description: The maximum amount of time operator has access to associated resources.
          format: x-obmcs-duration
          type: string
        definedTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing predefined tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Defined tags for this resource. Each key is predefined and scoped to a namespace.

            Example: `{"foo-namespace": {"bar-key": "value"}}`

            '
          type: object
        description:
          description: The rationale for requesting the access request.
          type: string
        displayName:
          description: The name of the access request.
          type: string
        freeformTags:
          additionalProperties:
            type: string
          description: 'Simple key-value pair that is applied without any predefined name, type or scope. Exists for cross-compatibility only.

            Example: `{"bar-key": "value"}`

            '
          type: object
        id:
          description: The unique identifier (OCID) of the access request, which can't be changed after creation.
          type: string
        lifecycleState:
          description: The current state of the access request.
          type: string
          x-obmcs-enumref: '#/definitions/AccessRequest/lifecycleState'
        lockboxId:
          description: The unique identifier (OCID) of the lockbox box that the access request is associated with, which can't be changed after creation.
          type: string
        requestorId:
          description: The unique identifier of the requestor.
          type: string
        requestorLocation:
          description: 'The two-char country code of the requestor while creating the access request

            Example: `US`

            '
          type: string
        systemTags:
          additionalProperties:
            additionalProperties:
              description: 'The value of the tag. Only string type is supported.

                '
              type: object
            description: 'Key-value pair representing system tags'' keys and values scoped to a namespace.

              Example: `{"bar-key": "value"}`

              '
            type: object
          description: 'Usage of system tag keys. These predefined keys are scoped to namespaces.

            Example: `{"orcl-cloud": {"free-tier-retained": "true"}}`

            '
          type: object
        timeCreated:
          description: 'The time the access request was created. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        timeExpired:
          description: 'The time the access request expired. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        timeUpdated:
          description: 'The time the access request was last updated. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
      required:
      - id
      - lockboxId
      - displayName
      - description
      - requestorId
      - lifecycleState
      - timeCreated
      - timeUpdated
      - timeExpired
      type: object
    HandleAccessRequestDetails:
      description: The details for handling access request.
      properties:
        action:
          description: The action take by persona
          enum:
          - APPROVE
          - DENY
          - REVOKE
          - CANCEL
          type: string
          x-obmcs-top-level-enum: '#/definitions/AccessRequestActionType'
        message:
          description: Action justification or details.
          maxLength: 255
          minLength: 1
          type: string
      required:
      - action
      type: object
    AccessRequest:
      description: 'An access request to a customer''s resource.

        An access request is a subsidiary resource of the Lockbox entity.

        '
      properties:
        accessDuration:
          description: The maximum amount of time operator has access to associated resources.
          format: x-obmcs-duration
          type: string
        activityLogs:
          description: The actions taken by different persona on the access request, e.g. approve/deny/revoke
          items:
            $ref: '#/components/schemas/ActivityLog'
          type: array
        context:
          additionalProperties:
            type: string
          description: The context object containing the access request specific details.
          type: object
        description:
          description: The rationale for requesting the access request and any other related details..
          type: string
        displayName:
          description: The name of the access request.
          type: string
        id:
          description: The unique identifier (OCID) of the access request, which can't be changed after creation.
          type: string
        lifecycleState:
          description: Possible access request lifecycle states.
          enum:
          - IN_PROGRESS
          - WAITING
          - SUCCEEDED
          - CANCELING
          - CANCELED
          - FAILED
          type: string
        lifecycleStateDetails:
          description: Details of access request lifecycle state.
          enum:
          - PROCESSING
          - WAITING_FOR_APPROVALS
          - APPROVED
          - AUTO_APPROVED
          - CANCELLING_ACCESS
          - EXPIRED
          - REVOKED
          - DENIED
          - ERROR
          type: string
        lockboxId:
          description: The unique identifier (OCID) of the lockbox box that the access request is associated with, which can't be changed after creation.
          type: string
        reminderCount:
          description: 'The count of times the access request was reminded.

            '
          type: integer
        requestorId:
          description: The unique identifier of the requestor.
          type: string
        requestorLocation:
          description: 'The location of the requestor. Format with be two letters indicatiog operator''s country code defined by https://jira-sd.mc1.oracleiaas.com/browse/SSD-17880

            Example: `US`

            '
          type: string
        timeCreated:
          description: 'The time the access request was created. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        timeExpired:
          description: 'The time the access request expired. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        timeReminded:
          description: 'The time the access request was last reminded. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        timeUpdated:
          description: 'The time the access request was last updated. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
      required:
      - id
      - lockboxId
      - displayName
      - description
      - requestorId
      - lifecycleState
      - lifecycleStateDetails
      - accessDuration
      - activityLogs
      - timeCreated
      - timeUpdated
      - timeExpired
      - timeReminded
      - reminderCount
      - requestorLocation
      type: object
    ExportAccessRequestsDetails:
      description: Details for generating report of Access Requests to export action
      properties:
        lockboxId:
          description: The unique identifier (OCID) of the lockbox box that the access request is associated with which is immutable.
          type: string
        timeCreatedAfter:
          description: Date and time after which access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339)
          format: date-time
          type: string
        timeCreatedBefore:
          description: Date and time before which access requests were created, as described in [RFC 3339](https://tools.ietf.org/rfc/rfc3339)s
          format: date-time
          type: string
      required:
      - lockboxId
      - timeCreatedAfter
      - timeCreatedBefore
      type: object
    ActivityLog:
      description: The log of the action taken by different persona on the access request, e.g. approve/deny/revoke
      properties:
        action:
          description: The action take by persona
          enum:
          - APPROVE
          - DENY
          - REVOKE
          - CANCEL
          type: string
          x-obmcs-top-level-enum: '#/definitions/AccessRequestActionType'
        message:
          description: The action justification or details.
          type: string
        timeUpdated:
          description: 'The time the action was taken. Format is defined by [RFC3339](https://tools.ietf.org/html/rfc3339).

            Example: `2020-01-25T21:10:29.600Z`

            '
          format: date-time
          type: string
        userId:
          description: User OCID of the persona
          type: string
 

# --- truncated at 32 KB (38 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/oracle/refs/heads/main/openapi/oracle-accessrequest-api-openapi.yml