| title | requestorSettings complex type |
|---|---|
| description | Used for the `requestorSettings` property of an access package assignment policy. Provides additional settings to select who can create a request. |
| ms.localizationpriority | medium |
| author | markwahl-msft |
| ms.subservice | entra-id-governance |
| doc_type | resourcePageType |
| ms.date | 07/26/2024 |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Used for the requestorSettings property of an access package assignment policy. Provides additional settings to select who can create a request for an access package on that policy.
| Who can request | scopeType | allowedRequestors collection |
|---|---|---|
| No one | NoSubjects |
empty array |
| Specific individual user in your directory | SpecificDirectorySubjects |
singleUser |
| Users in your directory who are members of a group | SpecificDirectorySubjects |
groupMembers |
Users in your directory with userType value of member |
AllExistingDirectoryMemberUsers |
empty array |
| Users in your directory | AllExistingDirectorySubjects |
empty array |
| Users in specific connected organizations | SpecificConnectedOrganizationSubjects |
connectedOrganizationMembers |
Users from any connected organizations that have the state property of the connected organization set to configured. |
AllConfiguredConnectedOrganizationSubjects |
empty array |
| Any user | AllExternalSubjects |
empty array |
| Property | Type | Description |
|---|---|---|
| scopeType | String | Who can request. One of NoSubjects, SpecificDirectorySubjects, SpecificConnectedOrganizationSubjects, AllConfiguredConnectedOrganizationSubjects, AllExistingConnectedOrganizationSubjects, AllExistingDirectoryMemberUsers, AllExistingDirectorySubjects or AllExternalSubjects. |
| acceptRequests | Boolean | Indicates whether new requests are accepted on this policy. |
| allowedRequestors | userSet collection | The users who are allowed to request on this policy, which can be singleUser, groupMembers, and connectedOrganizationMembers. |
None.
The following JSON representation shows the resource type.
{
"scopeType": "SpecificDirectorySubjects",
"acceptRequests": true,
"allowedRequestors": [
{
"@odata.type": "#microsoft.graph.groupMembers",
"isBackup": false,
"id": "string (identifier)",
"description": "Authorized requestors"
}
]
}