Merge branch 'main' of github.com:sailpoint-oss/api-specs

idn/beta/paths/delete-lifecycle-state.yaml

@@ -28,7 +28,7 @@ delete:
       content:
         application/json:
           schema:
-            $ref: '../schemas/BaseReferenceDto.yaml'
+            $ref: '../../v3/schemas/LifecyclestateDeleted.yaml'
     '401':
       $ref: '../../v3/responses/401.yaml'
     '403':

idn/beta/paths/role-bulk-delete.yaml

@@ -26,7 +26,7 @@ post:
       content:
         application/json:
           schema:
-            $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+            $ref: '../../v3/schemas/TaskResultDto.yaml'
           example:
             {
               "type": "TASK_RESULT",

idn/beta/paths/workgroups/workgroup-members.yaml

@@ -35,7 +35,23 @@ get:
           schema:
             type: array
             items:
-              $ref: "../../../v3/schemas/BaseReferenceDto.yaml"
+              type: object
+              description: Identity of workgroup member. 
+              properties:
+                type:
+                  type: string 
+                  description: Workgroup member identity DTO type. 
+                  enum: 
+                    - IDENTITY
+                  example: IDENTITY
+                id:
+                  type: string
+                  description: Workgroup member identity ID. 
+                  example: 2c7180a46faadee4016fb4e018c20642
+                name:
+                  type: string
+                  description: Workgroup member identity display name. 
+                  example: Michael Michaels
     '400':
       $ref: '../../../v3/responses/400.yaml'
     '401':

idn/beta/schemas/AccessItemOwnerDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Access item owner's identity. 
+properties:
+  type:
+    type: string 
+    description: Access item owner's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Access item owner's identity ID.
+    example: 2c9180a46faadee4016fb4e018c20639
+  name:
+    type: string
+    description: Access item owner's human-readable display name. 
+    example: Support

idn/beta/schemas/AccessItemRequestedForDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Identity the access item is requested for.
+properties:
+  type:
+    type: string 
+    description: DTO type of identity the access item is requested for.
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of identity the access item is requested for. 
+    example: 2c4180a46faadee4016fb4e018c20626
+  name:
+    type: string
+    description: Human-readable display name of identity the access item is requested for. 
+    example: Robert Robinson

idn/beta/schemas/AccessItemRequesterDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Access item requester's identity. 
+properties:
+  type:
+    type: string 
+    description: Access item requester's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Access item requester's identity ID. 
+    example: 2c7180a46faadee4016fb4e018c20648
+  name:
+    type: string
+    description: Access item owner's human-readable display name. 
+    example: William Wilson

idn/beta/schemas/AccessReference.yaml

@@ -16,7 +16,7 @@ properties:
   type:
     $ref: '../../v3/schemas/RequestableObjectType.yaml'
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemOwnerDto.yaml'
   requestCommentsRequired:
     type: boolean
     description: If comments are required while requesting the access item.

idn/beta/schemas/ActivityDataSource.yaml

@@ -1,6 +1,6 @@
 description: A reference to the source of activity
 allOf:
-  - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+  - $ref: '../../v3/schemas/SourceDto.yaml'
   - type: object
     properties:
       integrationType:

idn/beta/schemas/ApplicationReference.yaml

@@ -14,4 +14,4 @@ properties:
     description: Description of the application.
     example: Access to research information, lab results, and schematics
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemOwnerDto.yaml'

idn/beta/schemas/AttrSyncSourceConfig.yaml

@@ -6,12 +6,7 @@ required:
   - attributes
 properties:
   source:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/AttrSyncSource.yaml'
-    description: Reference to the source which is the target of the attribute synchronization
-    example:
-      - type: 'SOURCE'
-        id: '2c9180835d191a86015d28455b4b232a'
-        name: 'HR Active Directory'
   attributes:
     type: array
     description: Attribute synchronization configuration for specific identity attributes in the context of a source

idn/beta/schemas/AttrSyncTenantSyncTarget.yaml

@@ -2,12 +2,7 @@
 type: object
 properties:
   source:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/AttrSyncSource.yaml'
-    description: Reference to the source which is the target of the attribute synchronization
-    example:
-      - type: 'SOURCE'
-        id: '2c9180835d191a86015d28455b4b232a'
-        name: 'HR Active Directory'
   attribute:
     type: string
     description: Name of the source account attribute to which the identity attribute values should be synchronized

idn/beta/schemas/BulkTaggedObject.yaml

@@ -8,7 +8,7 @@ properties:
     type: array
     items:
       type: string
-    description: Label to be applied to an Object
+    description: Label to be applied to object. 
     example: [ "BU_FINANCE", "PCI" ]
   operation:
     type: string

idn/beta/schemas/CertificationReference.yaml

@@ -1,15 +1,9 @@
-description: The previous certification
+description: Previous certification. 
 type: object
 allOf:
-- $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+- $ref: '../../v3/schemas/CertificationReferenceDto.yaml'
 - type: object
   properties:
     reviewer:
       $ref: './Reviewer.yaml'
       description: Certification reviewer
-properties:
-  type:
-    description: The type of object that the reviewer is.
-    enum:
-    - "CERTIFICATION"
-    example: CERTIFICATION

idn/beta/schemas/CommentDto.yaml

@@ -2,3 +2,28 @@ type: object
 properties:
   comment:
     type: string
+    nullable: true
+    description: Comment content. 
+    example: This is a comment. 
+  author:
+    type: object
+    properties:
+      type:
+        type: string
+        description: DTO type of the commenting identity. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of the commenting identity. 
+        example: 2c91808568c529c60168cca6f90c1313
+      name:
+        type: string
+        description: Display name of the commenting identity. 
+        example: Adam Kennedy
+  created:
+    type: string
+    format: 'date-time'
+    description: Date and time comment was created.
+    example: '2017-07-11T18:45:37.098Z'

idn/beta/schemas/CompletedApproval.yaml

@@ -27,17 +27,29 @@ properties:
     $ref: '../../v3/schemas/AccessRequestType.yaml'
     description: If the access-request was for granting or revoking access.
   requester:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemRequesterDto.yaml'
-    description: The identity that requested the item.
   requestedFor:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemRequestedForDto.yaml'
-    description: The identity for whom the item is requested for.
   reviewedBy:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    type: object
-    description: The identity who has reviewed the approval.
+    description: Identity who reviewed the access item request. 
+    properties:
+      type:
+        type: string 
+        description: DTO type of identity who reviewed the access item request. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of identity who reviewed the access item request. 
+        example: 2c3780a46faadee4016fb4e018c20652
+      name:
+        type: string
+        description: Human-readable display name of identity who reviewed the access item request. 
+        example: Allen Albertson
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemOwnerDto.yaml'
-    description: The owner or approver of the approval.
   requestedObject:
     $ref: './RequestableObjectReference.yaml'
     description: The requested access item.
@@ -45,7 +57,10 @@ properties:
     $ref: '../../v3/schemas/CommentDto.yaml'
     description: The requester's comment.
   reviewerComment:
-    $ref: '../../v3/schemas/CommentDto.yaml'
+    allOf:
+      - $ref: './CommentDto.yaml'
+    type: object
+    nullable: true 
     description: The approval's reviewer's comment.
   previousReviewersComments:
     type: array
@@ -66,6 +81,7 @@ properties:
     description: The final state of the approval
   removeDate:
     type: string
+    nullable: true
     description: The date the role or access profile is no longer assigned to the specified identity.
     format: 'date-time'
     example: '2020-07-11T00:00:00Z'
@@ -75,6 +91,7 @@ properties:
     description: If true, then the request was to change the remove date or sunset date.
   currentRemoveDate:
     type: string
+    nullable: true
     description: The remove date or sunset date that was assigned at the time of the request.
     format: 'date-time'
     example: '2020-07-11T00:00:00Z'

idn/beta/schemas/ConfigObject.yaml

@@ -7,7 +7,7 @@ properties:
     description: Current version of configuration object.
     example: 1
   self:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/SelfImportExportDto.yaml'
   object:
     description: Object details. Format dependant on the object type.
     additionalProperties: true

idn/beta/schemas/CreatePersonalAccessTokenResponse.yaml

@@ -21,8 +21,7 @@ properties:
     description: The name of the personal access token. Cannot be the same as other personal access tokens owned by a user.
     example: "NodeJS Integration"
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/PatOwner.yaml'
-    description: Details about the owner of the personal access token.
   created:
     type: string
     format: 'date-time'

idn/beta/schemas/EntitlementDto.yaml

@@ -28,9 +28,4 @@ allOf:
         description: Determines if this Entitlement is goverened in the cloud.
         type: boolean
       source:
-        $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+        $ref: '../../v3/schemas/EntitlementSource.yaml'
-        description: Reference to the source this entitlment belongs to.
-        example:
-          - type: 'SOURCE'
-            id: '2c9180835d191a86015d28455b4b232a'
-            name: 'HR Active Directory'

idn/beta/schemas/EntitlementRef.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Entitlement including a specific set of access.
+properties:
+  type:
+    type: string 
+    description: Entitlement's DTO type. 
+    enum: 
+      - ENTITLEMENT
+    example: ENTITLEMENT
+  id:
+    type: string
+    description: Entitlement's ID. 
+    example: 2c91809773dee32014e13e122092014e
+  name:
+    type: string
+    description: Entitlement's display name. 
+    example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"

idn/beta/schemas/GetPersonalAccessTokenResponse.yaml

@@ -17,8 +17,7 @@ properties:
     description: Scopes of the personal  access token.
     example: [ "demo:personal-access-token-scope:first", "demo:personal-access-token-scope:second" ]
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/PatOwner.yaml'
-    description: Details about the owner of the personal access token.
   created:
     type: string
     format: 'date-time'

idn/beta/schemas/Identity.yaml

@@ -36,7 +36,23 @@ allOf:
           - LOCKED
         example: LOCKED
       managerRef:
-        $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+        type: object
+        description: Identity's manager.
+        properties:
+          type:
+            type: string 
+            description: DTO type of identity's manager. 
+            enum: 
+              - IDENTITY
+            example: IDENTITY
+          id:
+            type: string
+            description: ID of identity's manager. 
+            example: 2c4180a46faadee4016fb4e018c20626
+          name:
+            type: string
+            description: Human-readable display name of identity's manager.
+            example: Robert Robinson
       isManager:
         type: boolean
         description: Whether this identity is a manager of another identity

idn/beta/schemas/IdentityEntitlements.yaml

@@ -1,10 +1,10 @@
 type: object
 properties:
   objectRef:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/TaggedObjectDto.yaml'
   tags:
     type: array
     items:
       type: string
-    description: Labels to be applied to an Object
+    description: Labels to be applied to object.
     example: [ "BU_FINANCE", "PCI" ]

idn/beta/schemas/IdentityPreviewResponse.yaml

@@ -1,7 +1,23 @@
 type: object
 properties:
   identity:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    type: object
+    description: Identity's manager.
+    properties:
+      type:
+        type: string 
+        description: DTO type of identity's manager. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of identity's manager. 
+        example: 2c4180a46faadee4016fb4e018c20626
+      name:
+        type: string
+        description: Human-readable display name of identity's manager.
+        example: Robert Robinson
   previewAttributes:
     type: array
     items:

idn/beta/schemas/IdentityProfileExportedObject.yaml

@@ -6,6 +6,6 @@ properties:
     example: 1
     description: Version or object from the target service.
   self:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/SelfImportExportDto.yaml'
   object:
     $ref: '../../v3/schemas/IdentityProfile.yaml'

idn/beta/schemas/IdentityWithNewAccess.yaml

@@ -5,13 +5,13 @@ required:
 type: object
 properties:
   identityId:
-    description: Set of identity id's to be checked.
+    description: Set of identity IDs to be checked.
     type: string
   accessRefs:
     description: The bundle of access profiles to be added to the identities specified. All references must be ENTITLEMENT type.
     type: array
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      $ref: './EntitlementRef.yaml'
   clientMetadata:
     type: object
     additionalProperties:

idn/beta/schemas/ImportOptions.yaml

@@ -38,10 +38,18 @@ properties:
         }
     }
   defaultReferences:
-    description: List of BaseRefenceDtos that can be used to resolve references on import.
+    description: List of object types that can be used to resolve references on import.
     type: array
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      type: string
+      enum: 
+        - IDENTITY_OBJECT_CONFIG
+        - IDENTITY_PROFILE
+        - RULE
+        - SOURCE
+        - TRANSFORM
+        - TRIGGER_SUBSCRIPTION
+      example: "TRIGGER_SUBSCRIPTION"  
   excludeBackup:
     description: By default, every import will first export all existing objects supported by sp-config as a backup before the import is attempted. If excludeBackup is true, the backup will not be performed.
     type: boolean

idn/beta/schemas/ObjectImportResult.yaml

@@ -21,7 +21,7 @@ properties:
     description: References to objects that were created or updated by the import.
     type: array
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      $ref: '../../v3/schemas/ImportObject.yaml'
 required:
   - infos
   - warnings

idn/beta/schemas/PendingApproval.yaml

@@ -27,14 +27,11 @@ properties:
     $ref: '../../v3/schemas/AccessRequestType.yaml'
     description: If the access-request was for granting or revoking access.
   requester:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemRequesterDto.yaml'
-    description: The identity that requested the item.
   requestedFor:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemRequestedForDto.yaml'
-    description: The identity for whom the item is requested for.
   owner:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './AccessItemOwnerDto.yaml'
-    description: The owner or approver of the approval.
   requestedObject:
     $ref: './RequestableObjectReference.yaml'
     description: The requested access item.

idn/beta/schemas/ProvisioningConfig.yaml

@@ -11,7 +11,7 @@ properties:
     type: array
     items:
       allOf:
-        - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+        - $ref: '../../v3/schemas/ServiceDeskSource.yaml'
       properties:
         type:
           description: The type of object being referenced

idn/beta/schemas/ReportResultReference.yaml

@@ -1,13 +1,16 @@
 allOf:
-- $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+  - $ref: '../../v3/schemas/SodReportResultDto.yaml'
-- type : object
+  - type : object
-  properties:
+    properties:
-    status:
+      status:
-      type: string
+        type: string
-      enum:
+        description: Status of a SOD policy violation report.
-        - SUCCESS
+        enum:
-        - WARNING
+          - SUCCESS
-        - ERROR
+          - WARNING
-        - TERMINATED
+          - ERROR
-        - TEMP_ERROR
+          - TERMINATED
-        - PENDING
+          - TEMP_ERROR
+          - PENDING
+        example: PENDING
+  

idn/beta/schemas/Reviewer.yaml

@@ -4,17 +4,24 @@ required:
 - type
 - id
 - name
-allOf:
-- $ref: '../../v3/schemas/BaseReferenceDto.yaml'
 properties:
   type:
-    description: The type of object that the reviewer is.
+    type: string
+    description: The reviewer's DTO type. 
     enum:
-    - "IDENTITY"
+    - IDENTITY
-    - "GOVERNANCE_GROUP"
+    - GOVERNANCE_GROUP
     example: IDENTITY
+  id: 
+    type: string
+    description: The reviewer's ID. 
+    example: 2c7180a46faadee4016fb4e018c20642
+  name: 
+    type: string
+    description: The reviewer's display name. 
+    example: Michael Michaels
   email:
     type: string
     nullable: true
-    description: 'The email of the reviewing identity. Only applicable to `IDENTITY`'
+    description: The reviewing identity's email. Only applicable to `IDENTITY`.
     example: reviewer@test.com

idn/beta/schemas/SaasManagementApplication.yaml

@@ -44,13 +44,13 @@ properties:
       UNKNOWN - The integration state is not recognized.
   identityNowSource:
     allOf:
-      - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      - $ref: '../../v3/schemas/SourceDto.yaml'
     nullable: true
     description: Reference to mapped IdentityNow Source, if mapping exists.
     example:
       type: "SOURCE"
-      id: "2c9180866166b5b0016167c32ef31a66"
+      id: "2c9180835d191a86015d28455b4b232a"
-      name: "Corporate directory"
+      name: "HR Active Directory"
   lastTested:
     type: string
     nullable: true

idn/beta/schemas/ServiceDeskIntegrationDto.yaml

@@ -1,14 +1,14 @@
 allOf:
   - $ref: './BaseCommonDto.yaml'
   - type: object
-    description: Specification of a Service Desk integration
+    description: Specification of a Service Desk integration.
     required:
       - description
       - type
       - attributes
     properties:
       description:
-        description: Description of the Service Desk integration
+        description: Description of the Service Desk integration.
         type: string
         example: A very nice Service Desk integration
       type:
@@ -22,43 +22,17 @@ allOf:
         example: ServiceNowSDIM
       ownerRef:
         allOf:
-          - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+          - $ref: '../../v3/schemas/OwnerDto.yaml'
-        description: Reference to the identity that is the owner of this Service Desk integration
-        properties:
-          type:
-            description: The type of object being referenced
-            enum:
-              - IDENTITY
-            example: IDENTITY
-          id:
-            description: ID of the identity
-            example: 2c91808568c529c60168cca6f90c1313
-          name:
-            description: Human-readable display name of the identity
-            example: MyName
       clusterRef:
         allOf:
-          - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+          - $ref: '../../v3/schemas/SourceClusterDto.yaml'
-        description: Reference to the source cluster for this Service Desk integration
-        properties:
-          type:
-            description: The type of object being referenced
-            enum:
-              - CLUSTER
-            example: CLUSTER
-          id:
-            description: ID of the cluster
-            example: 2c9180866166b5b0016167c32ef31a66
-          name:
-            description: Human-readable display name of the cluster
-            example: Corporate Cluster
       cluster:
-        description: ID of the cluster for the Service Desk integration (replaced by clusterRef, retained for backward compatibility)
+        description: ID of the cluster for the Service Desk integration (replaced by clusterRef, retained for backward compatibility).
         type: string
         example: xyzzy999
         deprecated: true
       managedSources:
-        description: Source IDs for the Service Desk integration (replaced by provisioningConfig.managedSResourceRefs, but retained here for backward compatibility)
+        description: Source IDs for the Service Desk integration (replaced by provisioningConfig.managedSResourceRefs, but retained here for backward compatibility).
         type: array
         items:
           type: string
@@ -79,17 +53,4 @@ allOf:
         }
       beforeProvisioningRule:
         allOf:
-          - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+          - $ref: '../../v3/schemas/BeforeProvisioningRuleDto.yaml'
-        description: Reference to beforeProvisioningRule for this Service Desk integration
-        properties:
-          type:
-            description: The type of object being referenced
-            enum:
-              - RULE
-            example: RULE
-          id:
-            description: ID of the rule
-            example: 2c91808568c529c60168cca6f90c1333
-          name:
-            description: Human-readable display name of the rule
-            example: Example Rule

idn/beta/schemas/SodPolicy.yaml

@@ -2,12 +2,12 @@ type: object
 properties:
   id:
     type: string
-    description: Policy id
+    description: Policy ID.
     example: "0f11f2a4-7c94-4bf3-a2bd-742580fe3bde"
     readOnly: true
   name:
     type: string
-    description: Policy Business Name
+    description: Policy business name. 
     example: "policy-xyz"
   created:
     type: string
@@ -23,51 +23,51 @@ properties:
     readOnly: true
   description:
     type: string
-    description: Optional description of the SOD policy
+    description: Optional description of the SOD policy.
     example: "This policy ensures compliance of xyz"
     nullable: true
   ownerRef:
-    $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/OwnerDto.yaml'
   externalPolicyReference:
     type: string
-    description: Optional External Policy Reference
+    description: Optional external policy reference. 
     example: "XYZ policy"
     nullable: true
   policyQuery:
     type: string
-    description: Search query of the SOD policy
+    description: Search query of the SOD policy.
     example: "@access(id:0f11f2a4-7c94-4bf3-a2bd-742580fe3bdg) AND @access(id:0f11f2a4-7c94-4bf3-a2bd-742580fe3bdf)"
   compensatingControls:
     type: string
-    description: Optional compensating controls(Mitigating Controls)
+    description: Optional compensating controls (Mitigating Controls).
     example: "Have a manager review the transaction decisions for their \"out of compliance\" employee"
     nullable: true
   correctionAdvice:
     type: string
-    description: Optional correction advice
+    description: Optional correction advice.
     example: "Based on the role of the employee, managers should remove access that is not required for their job function."
     nullable: true
   state:
     type: string
-    description: whether the policy is enforced or not
+    description: Whether the policy is enforced or not.
     enum:
       - ENFORCED
       - NOT_ENFORCED
     example: ENFORCED
   tags:
     type: array
-    description: tags for this policy object
+    description: Tags for the policy object.
     example: ["TAG1", "TAG2"]
     items:
       type: string
   creatorId:
     type: string
-    description: Policy's creator ID
+    description: Policy's creator ID.
     example: "0f11f2a4-7c94-4bf3-a2bd-742580fe3bde"
     readOnly: true
   modifierId:
     type: string
-    description: Policy's modifier ID
+    description: Policy's modifier ID.
     example: "0f11f2a4-7c94-4bf3-a2bd-742580fe3bde"
     nullable : true
     readOnly: true
@@ -76,12 +76,12 @@ properties:
     nullable: true
   scheduled:
     type: boolean
-    description: defines whether a policy has been scheduled or not
+    description: Defines whether a policy has been scheduled or not.
     example: true
     default: false
   type:
     type: string
-    description: whether a policy is query based or conflicting access based
+    description: Whether a policy is query based or conflicting access based.
     default: GENERAL
     enum:
       - GENERAL

idn/beta/schemas/SodPolicyDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: SOD policy. 
+properties:
+  type:
+    type: string 
+    description: SOD policy DTO type. 
+    enum: 
+      - SOD_POLICY
+    example: SOD_POLICY
+  id:
+    type: string
+    description: SOD policy ID. 
+    example: 0f11f2a4-7c94-4bf3-a2bd-742580fe3bde
+  name:
+    type: string
+    description: SOD policy display name. 
+    example: Business SOD Policy 

idn/beta/schemas/SodPolicySchedule.yaml

@@ -23,7 +23,7 @@ properties:
   recipients:
     type: array
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      $ref: '../../v3/schemas/SodRecipient.yaml'
   emailEmptyResults:
     type: boolean
     description: Indicates if empty results need to be emailed

idn/beta/schemas/SodViolationCheckResult.yaml

@@ -25,13 +25,8 @@ properties:
       $ref: './SodViolationContext.yaml'
   violatedPolicies:
     type: array
-    description: A list of the Policies that were violated
+    description: A list of the Policies that were violated.
     items:
-      $ref: './BaseReferenceDto.yaml'
+      $ref: './SodPolicyDto.yaml'
-      description: Reference to the policy that was violated
-      example:
-        - type: "SOD_POLICY"
-          id: "69129440-422d-4a23-aadd-35c828d5bfda"
-          name: 'HR Policy'
 
 

idn/beta/schemas/SodViolationContext.yaml

@@ -1,9 +1,8 @@
-description: The contextual information of the violated criteria
+description: The contextual information of the violated criteria.
 type: object
 properties:
   policy:
-    $ref: "../../v3/schemas/BaseReferenceDto.yaml"
+    $ref: './SodPolicyDto.yaml'
-    description: Reference to the Policy that is being violated.
   conflictingAccessCriteria:
     type: object
     description: The object which contains the left and right hand side of the entitlements that got violated according to the policy.

idn/beta/schemas/Tag.yaml

@@ -24,7 +24,30 @@ properties:
   tagCategoryRefs:
     type: array
     items: 
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      type: object
+      description: Tagged object's category. 
+      properties:
+        type:
+          type: string 
+          description: DTO type of the tagged object's category. 
+          enum: 
+            - ACCESS_PROFILE
+            - APPLICATION
+            - CAMPAIGN
+            - ENTITLEMENT
+            - IDENTITY
+            - ROLE
+            - SOD_POLICY
+            - SOURCE
+          example: ENTITLEMENT
+        id:
+          type: string
+          description: Tagged object's ID. 
+          example: 2c91809773dee32014e13e122092014e
+        name:
+          type: string
+          description: Tagged object's display name. 
+          example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"
     readOnly: true
 required:
   - id

idn/beta/schemas/TagCategoryDto.yaml

@@ -0,0 +1,20 @@
+type: object
+description: Tagged object's category. 
+properties:
+  type:
+    type: string 
+    description: DTO type of the tagged object's category. 
+    enum: 
+      - ACCESS_PROFILE
+      - ENTITLEMENT
+      - IDENTITIY
+      - ROLE
+    example: ENTITLEMENT
+  id:
+    type: string
+    description: Tagged object's ID. 
+    example: 2c91809773dee32014e13e122092014e
+  name:
+    type: string
+    description: Tagged object's display name. 
+    example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"

idn/beta/schemas/TeamSummaryDto.yaml

@@ -1,8 +1,23 @@
 type: object
 properties:
   manager:
-    $ref: "../../v3/schemas/BaseReferenceDto.yaml"
+    type: object
-    description: Reference to the identity's manager
+    description: Manager's identity. 
+    properties:
+      type:
+        type: string 
+        description: Manager's DTO type. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: Manager's identity ID.
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Manager's display name. 
+        example: Michael Michaels
   reports:
-    $ref: "../schemas/TeamSummaryReportsDto.yaml"
+    $ref: '../schemas/TeamSummaryReportsDto.yaml'
-    description: Data related to the Identities that are managed by the provided identity
+    description: Data related to the Identities that are managed by the provided identity.

idn/beta/schemas/UpdateSegmentEntitlementAssignmentInput.yaml

@@ -6,11 +6,11 @@ properties:
     example: 313c28e5-3c3f-4bfe-bdd6-748afc123576
   assignments:
     type: array
-    description: Array of entitlement ids to be assigned to the segment
+    description: Array of entitlement IDs to be assigned to the segment.
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      $ref: './EntitlementRef.yaml'
   removals:
     type: array
     description: Array of entitlement ids to be removed from the segment
     items:
-      $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      $ref: './EntitlementRef.yaml'

idn/beta/schemas/ViolationOwnerAssignmentConfig.yaml

@@ -16,6 +16,6 @@ properties:
     nullable: true
   ownerRef:
     allOf:
-      - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      - $ref: '../../v3/schemas/OwnerDto.yaml'
       - nullable: true
 

idn/beta/schemas/Workflow.yaml

@@ -8,31 +8,34 @@ allOf:
     executionCount:
       type: integer
       format: int32
-      description: The number of times this workflow has been executed
+      description: The number of times this workflow has been executed.
       example: 2
     failureCount:
       type: integer
       format: int32
-      description: The number of times this workflow has failed during execution
+      description: The number of times this workflow has failed during execution.
       example: 0
     created:
       type: string
       format: date-time
-      description: The date and time the workflow was created
+      description: The date and time the workflow was created.
       example: "2022-01-10T16:06:16.636381447Z"
     creator:
-      allOf:
+      type: object
-      - $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+      description: Workflow creator's identity. 
-      description: The identity that created the workflow.
       properties:
         type:
+          type: string 
+          description: Workflow creator's DTO type. 
           enum: 
-          - "IDENTITY"
+            - IDENTITY
-          example: "IDENTITY"
+          example: IDENTITY
-          description: The type of object that is referenced
+        id:
-      example: {
+          type: string
-        "type": "IDENTITY",
+          description: Workflow creator's identity ID.
-        "id": "2c91808568c529c60168cca6f90c1313",
+          example: 2c7180a46faadee4016fb4e018c20642
-        "name": "William Wilson"
+        name:
-      }
+          type: string
+          description: Workflow creator's display name. 
+          example: Michael Michaels
 - $ref: './WorkflowBody.yaml'

idn/beta/schemas/sod/models/Exception.yaml

@@ -17,10 +17,25 @@ properties:
     description: The time when this SOD exception is modified.
     example: "2020-01-01T00:00:00.000Z"
   sodPolicy:
-    $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    $ref: './SodPolicyDto.yaml'
-    example: "00fc6afc-af1d-43af-b350-8d632f4c56ca"
   identity:
-    $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    type: object
+    description: Identity's basic details. 
+    properties:
+      type:
+        type: string 
+        description: Identity's DTO type. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: Identity ID.
+        example: 2c7180a46faadee4016fb4e018c20642
+    name:
+      type: string
+      description: Identity's display name. 
+      example: Michael Michaels
   start:
     type: string
     format: date-time

idn/beta/schemas/sod/models/ExceptionOriginDto.yaml

@@ -0,0 +1,13 @@
+type: object
+description: Origin activity of the SOD violation exception. 
+properties:
+  type:
+    type: string 
+    description: DTO type of origin activity of the SOD violation exception. 
+    enum: 
+      - ACCOUNT_ACTIVITY
+    example: ACCOUNT_ACTIVITY
+  id:
+    type: string
+    description: ID of role using the access profile. 
+    example: 2c9180867372a2590173774358eb016d

idn/beta/schemas/sod/models/IdentityWithNewAccess.yaml

@@ -9,18 +9,26 @@ properties:
     type: string
     example: 2c91808568c529c60168cca6f90c1313
   accessRefs:
-    description: The list of ENTITLEMENTs to consider for calculating possible violations in a preventive check.
+    description: The list of entitlements to consider for possible violations in a preventive check.
     type: array
     items:
-      allOf:
+      type: object
-      - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+      description: Entitlement including a specific set of access.
-      description: The types of objects supported for SOD violations
       properties:
         type:
+          type: string 
+          description: Entitlement's DTO type. 
           enum: 
-          - "ENTITLEMENT"
+            - ENTITLEMENT
-          example: "ENTITLEMENT"
+          example: ENTITLEMENT
-          description: The type of object that is referenced
+        id:
+          type: string
+          description: Entitlement's ID. 
+          example: 2c91809773dee32014e13e122092014e
+        name:
+          type: string
+          description: Entitlement's display name. 
+          example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"
     example: 
     - type: ENTITLEMENT
       id: 2c918087682f9a86016839c050861ab1

idn/beta/schemas/sod/models/SodPolicyDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: SOD policy. 
+properties:
+  type:
+    type: string 
+    description: SOD policy DTO type. 
+    enum: 
+      - SOD_POLICY
+    example: SOD_POLICY
+  id:
+    type: string
+    description: SOD policy ID. 
+    example: 0f11f2a4-7c94-4bf3-a2bd-742580fe3bde
+  name:
+    type: string
+    description: SOD policy display name. 
+    example: Business SOD Policy 

idn/beta/schemas/sod/models/ViolationContext.yaml

@@ -2,7 +2,7 @@ type: object
 properties:
   policy:
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './SodPolicyDto.yaml'
     - type: object
       properties:
         type:
@@ -11,13 +11,13 @@ properties:
         name:
           type: string
           example: 'A very cool policy name'
-    description: The types of objects supported for SOD violations
+    description: The types of objects supported for SOD policy violations.
     properties:
       type:
         enum:
         - "ENTITLEMENT"
         example: "ENTITLEMENT"
-        description: The type of object that is referenced
+        description: The type of object supported for SOD policy violations. 
   conflictingAccessCriteria:
     $ref: './ExceptionAccessCriteria.yaml'
     nullable: false

idn/beta/schemas/trigger/example-input/AccessItemApproverDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Identity who approved the access item request. 
+properties:
+  type:
+    type: string 
+    description: DTO type of identity who approved the access item request. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of identity who approved the access item request. 
+    example: 2c3780a46faadee4016fb4e018c20652
+  name:
+    type: string
+    description: Human-readable display name of identity who approved the access item request. 
+    example: Allen Albertson

idn/beta/schemas/trigger/example-input/AccessItemRequestedForDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Identity the access item is requested for.
+properties:
+  type:
+    type: string 
+    description: DTO type of identity the access item is requested for.
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of identity the access item is requested for. 
+    example: 2c4180a46faadee4016fb4e018c20626
+  name:
+    type: string
+    description: Human-readable display name of identity the access item is requested for. 
+    example: Robert Robinson

idn/beta/schemas/trigger/example-input/AccessItemRequesterDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Access item requester's identity. 
+properties:
+  type:
+    type: string 
+    description: Access item requester's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Access item requester's identity ID. 
+    example: 2c7180a46faadee4016fb4e018c20648
+  name:
+    type: string
+    description: Access item owner's human-readable display name. 
+    example: William Wilson

idn/beta/schemas/trigger/example-input/AccessRequestDynamicApprover.yaml

@@ -13,14 +13,7 @@ properties:
     example: 4b4d982dddff4267ab12f0f1e72b5a6d
   requestedFor:
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequestedForDto.yaml'
-    description: The identity for whom the access is requested for.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced
   requestedItems:
     description: The access items that are being requested.
     type: array
@@ -65,11 +58,4 @@ properties:
           example: William needs this access for his day to day job activities.
   requestedBy:
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequesterDto.yaml'
-    description: The identity that initiated the access request.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced

idn/beta/schemas/trigger/example-input/AccessRequestPostApproval.yaml

@@ -16,14 +16,7 @@ properties:
     - type
     - name
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequestedForDto.yaml'
-    description: The identity who the access request is for.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced
   requestedItemsStatus:
     description: Details on the outcome of each access item.
     type: array
@@ -105,7 +98,7 @@ properties:
                 - type
                 - name
                 allOf:
-                - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+                - $ref: './AccessItemApproverDto.yaml'
                 description: The identity of the approver.
                 properties:
                   type:
@@ -119,11 +112,4 @@ properties:
     - type
     - name
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequesterDto.yaml'
-    description: The identity that initiated the access request.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced

idn/beta/schemas/trigger/example-input/AccessRequestPreApproval.yaml

@@ -16,14 +16,7 @@ properties:
     - type
     - name
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequestedForDto.yaml'
-    description: The identity who the access request is for.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced
   requestedItems:
     description: Details of the access items being requested.
     type: array
@@ -72,11 +65,4 @@ properties:
     - type
     - name
     allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    - $ref: './AccessItemRequesterDto.yaml'
-    description: The identity that initiated the access request.
-    properties:
-      type:
-        enum:
-        - "IDENTITY"
-        example: "IDENTITY"
-        description: The type of object that is referenced

idn/beta/schemas/trigger/example-input/AccountAggregationCompleted.yaml

@@ -14,15 +14,23 @@ properties:
     - type
     - name
     - id
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: The source the accounts are being aggregated from. 
-    description: The source from which the accounts were aggregated.
     properties:
       type:
+        type: string 
+        description: The DTO type of the source the accounts are being aggregated from. 
         enum: 
-        - SOURCE
+          - SOURCE
-        description: The type of object that is referenced
         example: SOURCE
+      id:
+        type: string
+        description: The ID of the source the accounts are being aggregated from. 
+        example: 2c9180835d191a86015d28455b4b232a
+      name:
+        type: string
+        description: Display name of the source the accounts are being aggregated from. 
+        example: HR Active Directory
   status:
     description: The overall status of the aggregation.
     enum:

idn/beta/schemas/trigger/example-input/AccountAttributesChanged.yaml

@@ -11,15 +11,23 @@ properties:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: The identity whose account attributes were updated. 
-    description: The identity whose account attributes changed.
     properties:
       type:
+        type: string 
+        description: DTO type of the identity whose account attributes were updated. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: ID of the identity whose account attributes were updated. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Display name of the identity whose account attributes were updated.
+        example: Michael Michaels
   source:
     required:
     - id

idn/beta/schemas/trigger/example-input/AccountCorrelated.yaml

@@ -11,52 +11,68 @@ properties:
     - type
     - name
     - id
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity the account is correlated with. 
-    description: The identity that the account correlated with.
     properties:
       type:
+        type: string 
+        description: DTO type of the identity the account is correlated with. 
         enum: 
-        - IDENTITY
+          - IDENTITY
-        description: The type of object that is referenced
         example: IDENTITY
+      id:
+        type: string
+        description: ID of the identity the account is correlated with. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Display name of the identity the account is correlated with. 
+        example: Michael Michaels
   source:
     required:
     - id
     - type
     - name
     type: object
-    description: The source from which the account came from.
+    description: The source the accounts are being correlated from. 
     properties:
-      id:
-        description: ID of the object to which this reference applies
-        type: string
-        example: 4e4d982dddff4267ab12f0f1e72b5a6d
       type:
         type: string 
+        description: The DTO type of the source the accounts are being correlated from. 
         enum: 
-        - SOURCE
+          - SOURCE
         example: SOURCE
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: The ID of the source the accounts are being correlated from. 
+        example: 2c9180835d191a86015d28455b4b232a
       name:
         type: string
-        description: Human-readable display name of the object to which this reference applies
+        description: Display name of the source the accounts are being correlated from. 
-        example: Corporate Active Directory
+        example: HR Active Directory
   account:
+    type: object
+    description: The correlated account. 
     required:
     - id
     - name
     - nativeIdentity
     - type
-    allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
-    description: The account that was correlated.
     properties:
       type:
+        type: string
+        description: The correlated account's DTO type. 
         enum:
         - ACCOUNT
-        description: The type of object that is referenced
         example: ACCOUNT
+      id: 
+        type: string
+        description: The correlated account's ID. 
+        example: 98da47c31df444558c211f9b205184f6
+      name: 
+        type: string
+        description: The correlated account's display name.
+        example: Brian Mendoza
       nativeIdentity:
         type: string
         description: Unique ID of the account on the source.

idn/beta/schemas/trigger/example-input/AccountUncorrelated.yaml

@@ -10,44 +10,67 @@ properties:
     - type
     - name
     - id
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity the account is uncorrelated with. 
-    description: The identity that the account uncorrelated with.
     properties:
       type:
+        type: string 
+        description: DTO type of the identity the account is uncorrelated with. 
         enum: 
-        - IDENTITY
+          - IDENTITY
-        description: The type of object that is referenced
         example: IDENTITY
+      id:
+        type: string
+        description: ID of the identity the account is uncorrelated with. 
+        example: 2c3780a46faadee4016fb4e018c20652
+      name:
+        type: string
+        description: Display name of the identity the account is uncorrelated with. 
+        example: Allen Albertson
   source:
     required:
     - type
     - name
     - id
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: The source the accounts are uncorrelated from. 
-    description: The source from which the account came from.
     properties:
       type:
+        type: string 
+        description: The DTO type of the source the accounts are uncorrelated from. 
         enum: 
-        - SOURCE
+          - SOURCE
-        description: The type of object that is referenced
         example: SOURCE
+      id:
+        type: string
+        description: The ID of the source the accounts are uncorrelated from. 
+        example: 2c6180835d191a86015d28455b4b231b
+      name:
+        type: string
+        description: Display name of the source the accounts are uncorrelated from. 
+        example: Corporate Directory
   account:
+    type: object
+    description: Uncorrelated account. 
     required:
     - id
     - name
     - nativeIdentity
     - type
-    allOf:
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
-    description: The account that was uncorrelated.
     properties:
       type:
         enum:
         - ACCOUNT
-        description: The type of object that is referenced
+        description: Uncorrelated account's DTO type. 
         example: ACCOUNT
+      id: 
+        type: string
+        description: Uncorrelated account's ID. 
+        example: 4dd497e3723e439991cb6d0e478375dd
+      name: 
+        type: string
+        description: Uncorrelated account's display name.
+        example: Sadie Jensen
       nativeIdentity:
         type: string
         description: Unique ID of the account on the source.

idn/beta/schemas/trigger/example-input/IdentityAttributesChanged.yaml

@@ -9,15 +9,23 @@ properties:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity whose attributes changed. 
-    description: The identity who's attributes changed.
     properties:
       type:
+        type: string 
+        description: DTO type of identity whose attributes changed. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: ID of identity whose attributes changed. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Display name of identity whose attributes changed. 
+        example: Michael Michaels
   changes:
     description: A list of one or more identity attributes that changed on the identity.
     type: array

idn/beta/schemas/trigger/example-input/IdentityCreated.yaml

@@ -9,18 +9,26 @@ properties:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Created identity.
-    description: The identity that was created.
     properties:
       type:
+        type: string 
+        description: Created identity's DTO type. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: Created identity ID.
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Created identity's display name. 
+        example: Michael Michaels
   attributes:
     type: object
-    description: The attributes assigned to the identity.  Attributes are determined by the identity profile.
+    description: The attributes assigned to the identity. Attributes are determined by the identity profile.
     additionalProperties: true
     example: {
       "firstname": "John"

idn/beta/schemas/trigger/example-input/IdentityDeleted.yaml

@@ -9,18 +9,26 @@ properties:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Deleted identity.
-    description: The identity that was deleted.
     properties:
       type:
+        type: string 
+        description: Deleted identity's DTO type. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: Deleted identity ID.
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Deleted identity's display name. 
+        example: Michael Michaels
   attributes:
     type: object
-    description: The attributes assigned to the identity.  Attributes are determined by the identity profile.
+    description: The attributes assigned to the identity. Attributes are determined by the identity profile.
     additionalProperties: true
     example: {
       "firstname": "John"

idn/beta/schemas/trigger/example-input/ProvisioningCompleted.yaml

@@ -38,30 +38,46 @@ properties:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Provisioning recpient. 
-    description: Reference to the identity who is the target of the provisioning request.
     properties:
       type:
+        type: string 
+        description: Provisioning recipient DTO type. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: Provisioning recipient's identity ID. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Provisioning recipient's display name. 
+        example: Michael Michaels
   requester:
     nullable: true
     required:
     - id
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Provisioning requester's identity. 
-    description: Reference to the identity (if any) who submitted the provisioning request.
     properties:
       type:
+        type: string 
+        description: Provisioning requester's DTO type. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: Provisioning requester's identity ID. 
+        example: 2c7180a46faadee4016fb4e018c20648
+      name:
+        type: string
+        description: Provisioning owner's human-readable display name. 
+        example: William Wilson
   accountRequests:
     type: array
     description: A list of provisioning instructions to perform on an account-by-account basis.  

idn/beta/schemas/trigger/example-input/SourceCreated.yaml

@@ -34,12 +34,20 @@ properties:
     - id
     - name
     - type
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity who created the source. 
-    description: The identity that created the source.
     properties:
       type:
+        type: string 
+        description: DTO type of identity who created the source. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: ID of identity who created the source. 
+        example: 2c7180a46faadee4016fb4e018c20648
+      name:
+        type: string
+        description: Display name of identity who created the source. 
+        example: William Wilson

idn/beta/schemas/trigger/example-input/SourceDeleted.yaml

@@ -34,12 +34,20 @@ properties:
     - id
     - name
     - type
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity who deleted the source. 
-    description: The identity that deleted the source.
     properties:
       type:
+        type: string 
+        description: DTO type of identity who deleted the source. 
         enum: 
-        - "IDENTITY"
+          - IDENTITY
-        example: "IDENTITY"
+        example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: ID of identity who deleted the source. 
+        example: 2c7180a46faadee4016fb4e018c20648
+      name:
+        type: string
+        description: Display name of identity who deleted the source. 
+        example: William Wilson

idn/beta/schemas/trigger/example-input/SourceUpdated.yaml

@@ -33,12 +33,20 @@ properties:
     required:
     - type
     - name
-    allOf:
+    type: object
-    - $ref: '../../../../v3/schemas/BaseReferenceDto.yaml'
+    description: Identity who updated the source. 
-    description: The identity or system that performed the update.
     properties:
       type:
+        type: string 
+        description: DTO type of identity who updated the source. 
         enum: 
-        - IDENTITY
+          - IDENTITY
         example: IDENTITY
-        description: The type of object that is referenced
+      id:
+        type: string
+        description: ID of identity who updated the source. 
+        example: 2c7180a46faadee4016fb4e018c20648
+      name:
+        type: string
+        description: Display name of identity who updated the source. 
+        example: William Wilson

idn/beta/schemas/workgroups/BulkWorkgroupMembersRequest.yaml

@@ -1,7 +1,23 @@
 description: List of identities to be added or removed to a Governance Group members list.
 type: array
 items:
-  $ref: "../../../v3/schemas/BaseReferenceDto.yaml"
+  type: object
+  description: Identity's basic details. 
+  properties:
+    type:
+      type: string 
+      description: Identity's DTO type. 
+      enum: 
+        - IDENTITY
+      example: IDENTITY
+    id:
+      type: string
+      description: Identity ID.
+      example: 2c7180a46faadee4016fb4e018c20642
+    name:
+      type: string
+      description: Identity's display name. 
+      example: Michael Michaels
 example:
       [
         {

idn/beta/schemas/workgroups/WorkgroupDto.yaml

@@ -1,30 +1,30 @@
 type: object
 properties:
   owner:
-    $ref: "../../../v3/schemas/BaseReferenceDto.yaml"
+    $ref: '../../../v3/schemas/OwnerDto.yaml'
-    description: Owner of the Governance Group
+    description: Governance group owner. 
   id:
     type: string
-    description: ID of the object to which this reference applies
+    description: Governance group ID. 
     example: 2c91808568c529c60168cca6f90c1313
     readOnly: true
   name:
     type: string
-    description: Name of the Governance Group
+    description: Governance group name. 
     example: DB Access Governance Group
   description:
     type: string
-    description: Description of the Governance Group
+    description: Governance group description. 
     example: Description of the Governance Group
   memberCount:
     type: integer
     format: int64
     example: 1641498673000
     readOnly: true
-    description: Number of members in the Governance Group.
+    description: Number of members in the governance group.
   connectionCount:
     type: integer
     format: int64
     example: 1641498673000
-    description: Number of connections in the Governance Group.
+    description: Number of connections in the governance group.
     readOnly: true

idn/v3/EntitlementRef.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Entitlement including a specific set of access.
+properties:
+  type:
+    type: string 
+    description: Entitlement's DTO type. 
+    enum: 
+      - ENTITLEMENT
+    example: ENTITLEMENT
+  id:
+    type: string
+    description: Entitlement's ID. 
+    example: 2c91809773dee32014e13e122092014e
+  name:
+    type: string
+    description: Entitlement's display name. 
+    example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"

idn/v3/paths/identity-profile-lifecycle-state.yaml

@@ -137,7 +137,7 @@ delete:
     - Lifecycle States
   summary: Delete Lifecycle State by ID
   description: >-
-    This endpoint deletes the Lifecycle State using it's ID.
+    This endpoint deletes the Lifecycle State using its ID.
 
     A token with API, or ORG_ADMIN authority is required to call this API.
   security:
@@ -163,7 +163,7 @@ delete:
       content:
         application/json:
           schema:
-            $ref: '../schemas/BaseReferenceDto.yaml'
+            $ref: '../../v3/schemas/LifecyclestateDeleted.yaml'
     '400':
       $ref: '../responses/400.yaml'
     '401':

idn/v3/paths/role-bulk-delete.yaml

@@ -26,7 +26,7 @@ post:
       content:
         application/json:
           schema:
-            $ref: '../../v3/schemas/BaseReferenceDto.yaml'
+            $ref: '../../v3/schemas/TaskResultDto.yaml'
           example:
             {
               "type": "TASK_RESULT",

idn/v3/schemas/AccessItemRequestedFor.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Identity the access item is requested for.
+properties:
+  type:
+    type: string 
+    description: DTO type of identity the access item is requested for.
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of identity the access item is requested for. 
+    example: 2c4180a46faadee4016fb4e018c20626
+  name:
+    type: string
+    description: Human-readable display name of identity the access item is requested for. 
+    example: Robert Robinson

idn/v3/schemas/AccessItemRequester.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Access item requester's identity. 
+properties:
+  type:
+    type: string 
+    description: Access item requester's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Access item requester's identity ID. 
+    example: 2c7180a46faadee4016fb4e018c20648
+  name:
+    type: string
+    description: Access item owner's human-readable display name. 
+    example: William Wilson

idn/v3/schemas/AccessItemReviewedBy.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Identity who reviewed the access item request. 
+properties:
+  type:
+    type: string 
+    description: DTO type of identity who reviewed the access item request. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of identity who reviewed the access item request. 
+    example: 2c3780a46faadee4016fb4e018c20652
+  name:
+    type: string
+    description: Human-readable display name of identity who reviewed the access item request. 
+    example: Allen Albertson

idn/v3/schemas/ApprovalStatusDto.yaml

@@ -6,17 +6,26 @@ properties:
       True if the request for this item was forwarded from one owner to another.
     example: false
   originalOwner:
-    $ref: "./BaseReferenceDto.yaml"
+    type: object
-    description: >-
+    description: Identity of orginal approval owner. 
-      Base identity/workgroup reference object representing the original owner,
+    properties:
-      if forwarded.
+      type:
+        type: string 
+        description: DTO type of original approval owner's identity.  
+        enum: 
+          - GOVERNANCE_GROUP
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of original approval owner's identity. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Display name of original approval owner. 
+        example: Michael Michaels
   currentOwner:
-    $ref: "./BaseReferenceDto.yaml"
+    $ref: './AccessItemReviewedBy.yaml'
-    description: >-
-      Base reference of approver that will make decision.
-  reviewedBy:
-    $ref: "./BaseReferenceDto.yaml"
-    description: The identity who has reviewed the approval.
   modified:
     type: string
     format: date-time

idn/v3/schemas/AttrSyncSource.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Target source for attribute synchronization. 
+properties:
+  type:
+    type: string 
+    description: DTO type of target source for attribute synchronization. 
+    enum: 
+      - SOURCE
+    example: SOURCE
+  id:
+    type: string
+    description: ID of target source for attribute synchronization. 
+    example: 2c9180835d191a86015d28455b4b232a
+  name:
+    type: string
+    description: Human-readable name of target source for attribute synchronization. 
+    example: HR Active Directory

idn/v3/schemas/BeforeProvisioningRuleDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Before Provisioning Rule. 
+properties:
+  type:
+    type: string 
+    description: Before Provisioning Rule DTO type. 
+    enum: 
+      - RULE
+    example: RULE
+  id:
+    type: string
+    description: Before Provisioning Rule ID. 
+    example: 048eb3d55c5a4758bd07dccb87741c78
+  name:
+    type: string
+    description: Rule display name. 
+    example: Before Provisioning Airtable Rule

idn/v3/schemas/CancelledRequestDetails.yaml

@@ -3,12 +3,12 @@ properties:
   comment:
     type: string
     description: Comment made by the owner when cancelling the associated request.
-    example: Nisl quis ipsum quam quisque condimentum nunc ut dolor nunc.
+    example: This request must be cancelled. 
   owner:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/OwnerDto.yaml'
   modified:
     type: string
     format: date-time
-    description: Date comment was added by the owner when cancelling the associated request
+    description: Date comment was added by the owner when cancelling the associated request.
     example: '2019-12-20T09:17:12.192Z'
 description: Provides additional details for a request that has been cancelled.

idn/v3/schemas/CertificationReferenceDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Certification for review. 
+properties:
+  type:
+    type: string 
+    description: DTO type of certification for review. 
+    enum: 
+      - CERTIFICATION
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of certification for review. 
+    example: 7589a83cec4b4f138ce56c1a5ef0756d
+  name:
+    type: string
+    description: Display name of certification for review. 
+    example: Manager Access for Michael Michaels

idn/v3/schemas/CommentDto.yaml

@@ -2,23 +2,28 @@ type: object
 properties:
   comment:
     type: string
-    description: Content of the comment
+    nullable: true
-    example: Et quam massa maximus vivamus nisi ut urna tincidunt metus elementum erat
+    description: Comment content. 
+    example: This is a comment. 
   author:
     type: object
     properties:
       type:
-        $ref: './DtoType.yaml'
+        type: string
+        description: DTO type of the commenting identity. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
       id:
         type: string
-        description: ID of the author
+        description: ID of the commenting identity. 
         example: 2c91808568c529c60168cca6f90c1313
       name:
         type: string
-        description: Human-readable display name of the identity making the comment
+        description: Display name of the commenting identity. 
         example: Adam Kennedy
   created:
     type: string
     format: 'date-time'
-    description: Date and time comment was created
+    description: Date and time comment was created.
     example: '2017-07-11T18:45:37.098Z'

idn/v3/schemas/CompletedApproval.yaml

@@ -27,17 +27,13 @@ properties:
     $ref: './AccessRequestType.yaml'
     description: If the access-request was for granting or revoking access.
   requester:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './AccessItemRequester.yaml'
-    description: The identity that requested the item.
   requestedFor:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './AccessItemRequestedFor.yaml'
-    description: The identity for whom the item is requested for.
   reviewedBy:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './AccessItemReviewedBy.yaml'
-    description: The identity who has reviewed the approval.
   owner:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './OwnerDto.yaml'
-    description: The owner or approver of the approval.
   requestedObject:
     $ref: './RequestableObjectReference.yaml'
     description: The requested access item.

idn/v3/schemas/CreatePersonalAccessTokenResponse.yaml

@@ -21,8 +21,7 @@ properties:
     description: The name of the personal access token. Cannot be the same as other personal access tokens owned by a user.
     example: "NodeJS Integration"
   owner:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/PatOwner.yaml'
-    description: Details about the owner of the personal access token.
   created:
     type: string
     format: 'date-time'

idn/v3/schemas/CurrentWorkItemOwnerDto.yaml

@@ -0,0 +1,18 @@
+type: object
+description: Identity of current work item owner. 
+properties:
+  type:
+    type: string 
+    description: DTO type of current work item owner's identity.  
+    enum: 
+      - GOVERNANCE_GROUP
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of current work item owner's identity. 
+    example: 2c3780a46faadee4016fb4e018c20652
+  name:
+    type: string
+    description: Display name of current work item owner. 
+    example: Allen Albertson

idn/v3/schemas/EntitlementDto.yaml

@@ -37,9 +37,4 @@ allOf:
         type: boolean
         example: false
       source:
-        $ref: "./BaseReferenceDto.yaml"
+        $ref: '../../v3/schemas/EntitlementSource.yaml'
-        description: Reference to the source this entitlment belongs to.
-        example:
-          - type: "SOURCE"
-            id: "2c9180835d191a86015d28455b4b232a"
-            name: "HR Active Directory"

idn/v3/schemas/EntitlementRef.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Entitlement including a specific set of access.
+properties:
+  type:
+    type: string 
+    description: Entitlement's DTO type. 
+    enum: 
+      - ENTITLEMENT
+    example: ENTITLEMENT
+  id:
+    type: string
+    description: Entitlement's ID. 
+    example: 2c91809773dee32014e13e122092014e
+  name:
+    type: string
+    description: Entitlement's display name. 
+    example: "CN=entitlement.490efde5,OU=OrgCo,OU=ServiceDept,DC=HQAD,DC=local"

idn/v3/schemas/EntitlementSource.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Source the entitlement belongs to. 
+properties:
+  type:
+    type: string 
+    description: DTO type of source the entitlement belongs to. 
+    enum: 
+      - SOURCE
+    example: SOURCE
+  id:
+    type: string
+    description: ID of source the entitlement belongs to. 
+    example: 2c9180835d191a86015d28455b4b232a
+  name:
+    type: string
+    description: Human-readable name of source the entitlement belongs to.
+    example: HR Active Directory

idn/v3/schemas/GetPersonalAccessTokenResponse.yaml

@@ -17,8 +17,7 @@ properties:
     description: Scopes of the personal  access token.
     example: [ "demo:personal-access-token-scope:first", "demo:personal-access-token-scope:second" ]
   owner:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: '../../v3/schemas/PatOwner.yaml'
-    description: Details about the owner of the personal access token.
   created:
     type: string
     format: 'date-time'

idn/v3/schemas/IdentityPreviewResponse.yaml

@@ -1,7 +1,23 @@
 type: object
 properties:
   identity:
-    $ref: '../schemas/BaseReferenceDto.yaml'
+    type: object
+    description: Identity's basic details. 
+    properties:
+      type:
+        type: string 
+        description: Identity's DTO type. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: Identity ID.
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Identity's display name. 
+        example: Michael Michaels
   previewAttributes:
     type: array
     items:

idn/v3/schemas/IdentityProfileExportedObject.yaml

@@ -1,5 +1,5 @@
 type: object
-description: Identity Profile exported object
+description: Identity profile exported object.
 properties:
   version:
     type: integer
@@ -7,6 +7,45 @@ properties:
     description: Version or object from the target service.
     format: 'int32'
   self:
-    $ref: '../schemas/BaseReferenceDto.yaml'
+    type: object
+    description: Self block for exported object. 
+    properties:
+      type:
+        type: string 
+        description: Exported object's DTO type.
+        enum: 
+          - ACCESS_PROFILE
+          - ACCESS_REQUEST_CONFIG
+          - ATTR_SYNC_SOURCE_CONFIG
+          - AUTH_ORG
+          - CAMPAIGN_FILTER
+          - FORM_DEFINITION
+          - GOVERNANCE_GROUP
+          - IDENTITY_OBJECT_CONFIG
+          - IDENTITY_PROFILE
+          - LIFECYCLE_STATE
+          - NOTIFICATION_TEMPLATE
+          - PASSWORD_POLICY
+          - PASSWORD_SYNC_GROUP
+          - PUBLIC_IDENTITIES_CONFIG
+          - ROLE
+          - RULE
+          - SEGMENT
+          - SERVICE_DESK_INTEGRATION
+          - SOD_POLICY
+          - SOURCE
+          - TAG
+          - TRANSFORM
+          - TRIGGER_SUBSCRIPTION
+          - WORKFLOW
+        example: SOURCE
+      id:
+        type: string
+        description: Exported object's ID. 
+        example: 2c9180835d191a86015d28455b4b232a
+      name:
+        type: string
+        description: Exported object's display name. 
+        example: HR Active Directory
   object:
     $ref: '../schemas/IdentityProfile.yaml'

idn/v3/schemas/IdentityUpdatedAccountAttributesDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: The identity whose account attributes were updated. 
+properties:
+  type:
+    type: string 
+    description: DTO type of the identity whose account attributes were updated. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of the identity whose account attributes were updated. 
+    example: 2c7180a46faadee4016fb4e018c20642
+  name:
+    type: string
+    description: Display name of the identity whose account attributes were updated.
+    example: Michael Michaels

idn/v3/schemas/IdentityWithNewAccess.yaml

@@ -5,14 +5,15 @@ required:
 type: object
 properties:
   identityId:
-    description: Set of identity id's to be checked.
+    description: Set of identity IDs to be checked.
     type: string
     example: '2c91809050db617d0150e0bf3215385e'
   accessRefs:
     description: The bundle of access profiles to be added to the identities specified. All references must be ENTITLEMENT type.
     type: array
     items:
-      $ref: './BaseReferenceDto.yaml'
+      allOf: 
+      - $ref: './EntitlementRef.yaml'
   clientMetadata:
     type: object
     additionalProperties:

idn/v3/schemas/ImportObject.yaml

@@ -0,0 +1,22 @@
+type: object
+description: Object created or updated by import.
+properties: 
+  type: 
+    type: string
+    description: DTO type of object created or updated by import.
+    enum: 
+      - IDENTITY_OBJECT_CONFIG
+      - IDENTITY_PROFILE
+      - RULE
+      - SOURCE
+      - TRANSFORM
+      - TRIGGER_SUBSCRIPTION
+    example: SOURCE
+  id: 
+    type: string
+    description: ID of object created or updated by import. 
+    example: 2c9180835d191a86015d28455b4b232a
+  name: 
+    type: string
+    description: Display name of object created or updated by import. 
+    example: HR Active Directory

idn/v3/schemas/LifecyclestateDeleted.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Deleted lifecycle state. 
+properties:
+  type:
+    type: string 
+    description: Deleted lifecycle state's DTO type. 
+    enum: 
+      - LIFECYCLE_STATE
+    example: LIFECYCLE_STATE
+  id:
+    type: string
+    description: Deleted lifecycle state ID. 
+    example: 12345
+  name:
+    type: string
+    description: Deleted lifecycle state's display name. 
+    example: Contractor Lifecycle

idn/v3/schemas/ManualWorkItemDetails.yaml

@@ -5,13 +5,43 @@ properties:
     description: True if the request for this item was forwarded from one owner to another.
     example: true
   originalOwner:
-    $ref: './BaseReferenceDto.yaml'
+    type: object
-    description: >-
+    description: Identity of original work item owner, if the work item has been forwarded.
-      Base identity/workgroup reference object representing the original owner, if forwarded.
+    properties:
+      type:
+        type: string 
+        description: DTO type of original work item owner's identity.  
+        enum: 
+          - GOVERNANCE_GROUP
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of original work item owner's identity. 
+        example: 2c7180a46faadee4016fb4e018c20642
+      name:
+        type: string
+        description: Display name of original work item owner. 
+        example: Michael Michaels
   currentOwner: 
-    $ref: './BaseReferenceDto.yaml'
+    type: object
-    description: >-
+    description: Identity of current work item owner. 
-      Base reference of approver that will make decision.
+    properties:
+      type:
+        type: string 
+        description: DTO type of current work item owner's identity.  
+        enum: 
+          - GOVERNANCE_GROUP
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: ID of current work item owner's identity. 
+        example: 2c3780a46faadee4016fb4e018c20652
+      name:
+        type: string
+        description: Display name of current work item owner. 
+        example: Allen Albertson
   modified:
     type: string
     format: date-time

idn/v3/schemas/ObjectImportResult.yaml

@@ -21,7 +21,7 @@ properties:
     description: References to objects that were created or updated by the import.
     type: array
     items:
-      $ref: '../schemas/BaseReferenceDto.yaml'
+      $ref: '../../v3/schemas/ImportObject.yaml'
 required:
   - infos
   - warnings

idn/v3/schemas/OriginalApprovalOwnerDto.yaml

@@ -0,0 +1,18 @@
+type: object
+description: Identity of orginal approval owner. 
+properties:
+  type:
+    type: string 
+    description: DTO type of original approval owner's identity.  
+    enum: 
+      - GOVERNANCE_GROUP
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of original approval owner's identity. 
+    example: 2c7180a46faadee4016fb4e018c20642
+  name:
+    type: string
+    description: Display name of original approval owner. 
+    example: Michael Michaels

idn/v3/schemas/OriginalWorkItemOwnerDto.yaml

@@ -0,0 +1,18 @@
+type: object
+description: Identity of original work item owner. 
+properties:
+  type:
+    type: string 
+    description: DTO type of original work item owner's identity.  
+    enum: 
+      - GOVERNANCE_GROUP
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: ID of original work item owner's identity. 
+    example: 2c7180a46faadee4016fb4e018c20642
+  name:
+    type: string
+    description: Display name of original work item owner. 
+    example: Michael Michaels

idn/v3/schemas/OwnerDto.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Owner's identity. 
+properties:
+  type:
+    type: string 
+    description: Owner's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Owner's identity ID.
+    example: 2c9180a46faadee4016fb4e018c20639
+  name:
+    type: string
+    description: Owner's display name. 
+    example: Support

idn/v3/schemas/PatOwner.yaml

@@ -0,0 +1,17 @@
+type: object
+description: Personal access token owner's identity. 
+properties:
+  type:
+    type: string 
+    description: Personal access token owner's DTO type. 
+    enum: 
+      - IDENTITY
+    example: IDENTITY
+  id:
+    type: string
+    description: Personal access token owner's identity ID.
+    example: 2c9180a46faadee4016fb4e018c20639
+  name:
+    type: string
+    description: Personal access token owner's human-readable display name. 
+    example: Support

idn/v3/schemas/PendingApproval.yaml

@@ -27,14 +27,27 @@ properties:
     $ref: './AccessRequestType.yaml'
     description: If the access-request was for granting or revoking access.
   requester:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './AccessItemRequester.yaml'
-    description: The identity that requested the item.
   requestedFor:
-    $ref: './BaseReferenceDto.yaml'
+    $ref: './AccessItemRequestedFor.yaml'
-    description: The identity for whom the item is requested for.
   owner:
-    $ref: './BaseReferenceDto.yaml'
+    type: object
-    description: The owner or approver of the approval.
+    description: Access item owner's identity. 
+    properties:
+      type:
+        type: string 
+        description: Access item owner's DTO type. 
+        enum: 
+          - IDENTITY
+        example: IDENTITY
+      id:
+        type: string
+        description: Access item owner's identity ID.
+        example: 2c9180a46faadee4016fb4e018c20639
+      name:
+        type: string
+        description: Access item owner's human-readable display name. 
+        example: Support
   requestedObject:
     $ref: './RequestableObjectReference.yaml'
     description: The requested access item.