diff --git a/dereferenced/deref-sailpoint-api.beta.yaml b/dereferenced/deref-sailpoint-api.beta.yaml index 2c25788..99537e2 100644 --- a/dereferenced/deref-sailpoint-api.beta.yaml +++ b/dereferenced/deref-sailpoint-api.beta.yaml @@ -9066,6 +9066,9 @@ paths: /access-requests: post: operationId: createAccessRequest + security: + - oauth2: + - 'idn:access-request:create' summary: Submit an Access Request tags: - Access Requests @@ -9093,6 +9096,7 @@ paths: * Can only be requested for a single identity at a time. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If removeDate is specified, then the access will be removed on that date and time. + * [Roles, Access Profiles] RemoveData can be specified only if access don't have a sunset date. * Allows a manager to request to revoke access for direct employees. A token with ORG_ADMIN authority can also request to revoke access from anyone. * Roles and Access Profiles can be requested for revocation. Revoke request for entitlements are not supported currently. @@ -9161,6 +9165,7 @@ paths: * The current SLA for the deprovisioning is 24 hours. * This date can be modified to either extend or decrease the duration of access item assignments for the specified identity. * Currently it is not supported for entitlements. + * If sunset date for role or access profile specified, removeDate cannot be established. This rule doesn't apply for entitlements. format: date-time example: '2020-07-11T21:23:15.000Z' required: