AccessReviewItem

Shape

• grantAccessGrant

  • The AccessGrant schema
  • created_atstring · date-time
  • grant_idGrantId (string · uuid)
  • roleRoleView

    • The RoleView schema
    • namestringThe role's display name: a built-in name such as Developer, or the custom role's name.
    • rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
    • builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
    • customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
  • scopeAccessScopeWhere the grant was made.

    • The AccessScope schema
    • full_pathstring
    • idstring
    • typeScopeTypegrouprepository
  • subjectGrantSubject
  • updated_atstring · date-time
  • expires_atstring · date-time or nulloptional
  • granted_byActorSummary or nulloptionalWho made the grant. Absent for access the platform created — the creator of a group or repository, or a copied membership.

    • The ActorSummary schema
    • emailstring
    • idstring
    • usernamestring
    • avatar_urlstring or nulloptional
  • last_exercised_atstring · date-time or nulloptionalWhen the grant last let somebody do something, to the day. Absent until it has.
  • reasonstring or nulloptional
• reasonsarray of AccessReviewReason: one of expiring | sensitive | unused | redundant | outside_collaborator | service_account
• covered_byarray of AccessGrantoptionalFor a redundant grant: the grants that already give everything it does, so the reviewer can see why revoking it takes nothing away.

  • The AccessGrant schema
  • created_atstring · date-time
  • grant_idGrantId (string · uuid)
  • roleRoleView

    • The RoleView schema
    • namestringThe role's display name: a built-in name such as Developer, or the custom role's name.
    • rankAccessLevelguestreporterdevelopermaintainerownerThe built-in rank the role counts as wherever a rank is compared, such as a protected branch's minimum.
    • builtinAccessLevelguestreporterdevelopermaintainerowneror nulloptionalSet when the role is built in.
    • customRoleId (string · uuid) or nulloptionalSet when the role is one the organization defined.
  • scopeAccessScopeWhere the grant was made.

    • The AccessScope schema
    • full_pathstring
    • idstring
    • typeScopeTypegrouprepository
  • subjectGrantSubject
  • updated_atstring · date-time
  • expires_atstring · date-time or nulloptional
  • granted_byActorSummary or nulloptionalWho made the grant. Absent for access the platform created — the creator of a group or repository, or a copied membership.

    • The ActorSummary schema
    • emailstring
    • idstring
    • usernamestring
    • avatar_urlstring or nulloptional
  • last_exercised_atstring · date-time or nulloptionalWhen the grant last let somebody do something, to the day. Absent until it has.
  • reasonstring or nulloptional

Graph

Used by