Skip to content

assignmentreviewsettings.md

Latest commit

 

History

History
75 lines (60 loc) · 3.59 KB

assignmentreviewsettings.md

File metadata and controls

75 lines (60 loc) · 3.59 KB
title assignmentReviewSettings resource type
description The assignmentReviewSettings type, used for the accessReviewSettings property of an access package assignment policy, provides additional settings to select who must review access package assignments from this policy, and how often they must be reviewed.
ms.localizationpriority medium
author markwahl-msft
ms.subservice entra-id-governance
doc_type resourcePageType
ms.date 07/26/2024

assignmentReviewSettings resource type

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

Used for the accessReviewSettings property of an access package assignment policy. Provides additional settings to select who must review access package assignments from this policy, and how often they must be reviewed.

Properties

This type has the following properties:

Property Type Description
accessReviewTimeoutBehavior accessReviewTimeoutBehavior The default decision to apply if the request isn't reviewed within the period specified in durationInDays. The possible values are: acceptAccessRecommendation, keepAccess, removeAccess, and unknownFutureValue.
durationInDays Int32 The number of days within which reviewers should provide input.
isAccessRecommendationEnabled Boolean Specifies whether to display recommendations to the reviewer. The default value is true
isApprovalJustificationRequired Boolean Specifies whether the reviewer must provide justification for the approval. The default value is true.
isEnabled Boolean If true, access reviews are required for assignments from this policy.
recurrenceType String The interval for recurrence, such as monthly or quarterly.
reviewerType String Who should be asked to do the review, either Self, Reviewers or Manager.
reviewers userSet collection If the reviewerType is Reviewers, this collection specifies the users who will be reviewers, either by ID or as members of a group, using a collection of singleUser and groupMembers.
startDateTime DateTimeOffset When the first review should start.

accessReviewTimeoutBehavior values

| Member | Description | |:---------------|:--------|:----------| | acceptAccessRecommendation | The review decision to take recommendations from access review to accept/remove access to access package. The general rule for AR recommendations is if last user sign in more than 30 days, it's recommended to remove access to that user. | | keepAccess | The review decision is to keep current access. | | removeAccess | The review decision is to remove access to access package. | | unknownFutureValue | Evolvable enumeration sentinel value. Don't use. |

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.assignmentReviewSettings",
  "isEnabled": "Boolean",
  "recurrenceType": "String",
  "reviewerType": "String",
  "startDateTime": "String (timestamp)",
  "durationInDays": "Integer",
  "reviewers": [
    {
      "@odata.type": "microsoft.graph.singleUser"
    }
  ],
  "isAccessRecommendationEnabled": "Boolean",
  "isApprovalJustificationRequired": "Boolean",
  "accessReviewTimeoutBehavior": "String"
}