accessReviewInstanceDecisionItem: filterByCurrentUser
命名空间:microsoft.graph
重要
Microsoft Graph版本下的 /beta API 可能会发生更改。 不支持在生产应用程序中使用这些 API。 若要确定 API 是否在 v1.0 中可用,请使用 版本 选择器。
检索访问评审实例或多阶段访问评审实例阶段的所有决策项,调用用户是该评审者。 决策项由给定 accessReviewInstance 或 accessReviewStage 上的 accessReviewInstanceDecisionItem 对象提供,调用用户是该对象的审阅者。
权限
要调用此 API,需要以下权限之一。要了解详细信息,包括如何选择权限的信息,请参阅权限。
| 权限类型 | 权限(从最低特权到最高特权) |
|---|---|
| 委派(工作或学校帐户) | AccessReview.Read.All、AccessReview.ReadWrite.All |
| 委派(个人 Microsoft 帐户) | 不支持。 |
| 应用 | AccessReview.Read.All、AccessReview.ReadWrite.All |
HTTP 请求
若要检索调用用户为审阅者的访问评审实例的决策:
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/decisions/filterByCurrentUser(on='reviewer')
若要检索调用用户是其审阅者的访问评审实例中某个阶段的决策:
GET /identityGovernance/accessReviews/definitions/{accessReviewScheduleDefinitionId}/instances/{accessReviewInstanceId}/stages/{accessReviewStageId}/decisions/filterByCurrentUser(on='reviewer')
备注
如果在 accessReviewScheduleDefinition 对象的 设置中启用 decisionHistoriesForReviewersEnabled 属性,则多阶段评审的审阅者可以检索以前阶段的决策。
函数参数
下表显示了可用于此方法的查询参数。
| 参数 | 类型 | 说明 |
|---|---|---|
| on | accessReviewInstanceDecisionItemFilterByCurrentUserOptions | 筛选以查询当前用户的决策对象。 可能的值为 reviewer. unknownFutureValue 使用 reviewer. 必填。 |
可选的查询参数
此方法支持 $selectOData $orderBy``$filter查询参数,$top``$skip以帮助自定义响应。 若要了解一般信息,请参阅 OData 查询参数。
此 API 的默认页面大小为 100 个 accessReviewInstanceDecisionItem 对象。 若要提高效率并避免因大型结果集而超时,请使用 $skip 分页和 $top 查询参数。 有关详细信息,请参阅在应用中对 Microsoft Graph 数据进行分页。
请求标头
| 名称 | 说明 |
|---|---|
| Authorization | Bearer {token}。必需。 |
请求正文
请勿提供此方法的请求正文。
响应
如果成功,此函数在响应正文中返回 200 OK 响应代码和 accessReviewInstanceDecisionItem 集合。
示例
示例 1:检索调用用户是其审阅者的 accessReviewInstance 的所有决策
请求
GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/0185aab8-9a7e-44b5-ae36-41b923c3bf87/instances/1234aab8-9a7e-5678-ae36-41b923c3bf87/decisions/filterByCurrentUser(on='reviewer')
响应
注意: 为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 200 OK
Content-Type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(accessReviewInstanceDecisionItem)",
"@odata.count": 1,
"value": [
{
"@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItem",
"id": "139166ec-d214-4835-95aa-3c1d89581e51",
"accessReviewId": "8d035c9d-798d-47fa-beb4-f986a4b8126f",
"reviewedDateTime": "2021-05-03T19:28:25.02Z",
"decision": "Approve",
"justification": "Christie still needs access to the Marketing group as she works in the Marketing organization.",
"appliedDateTime": null,
"applyResult": "New",
"recommendation": "Deny",
"principalLink": "https://graph.microsoft.com/v1.0/users/1800bb2c-955d-4205-8471-3a6c3116435d",
"resourceLink": null,
"resource": null,
"reviewedBy": {
"id": "36c4c56e-fce3-4e2d-b28e-4ac0c7d2fa10",
"displayName": "MOD Administrator",
"userPrincipalName": "MOD Administrator"
},
"appliedBy": {
"id": "00000000-0000-0000-0000-000000000000",
"displayName": "",
"userPrincipalName": ""
},
"target": {
"@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemUserTarget",
"userId": "1800bb2c-955d-4205-8471-3a6c3116435d",
"userDisplayName": "Christie Cline",
"userPrincipalName": "ChristieC@contoso.com"
},
"principal": {
"@odata.type": "#microsoft.graph.userIdentity",
"id": "1800bb2c-955d-4205-8471-3a6c3116435d",
"displayName": "Christie Cline",
"userPrincipalName": "ChristieC@contoso.com"
}
}
]
}
示例 2:检索多阶段访问评审的 accessReviewStage 上的所有决策,调用用户是其审阅者
请求
GET https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions/0185aab8-9a7e-44b5-ae36-41b923c3bf87/instances/1234aab8-9a7e-5678-ae36-41b923c3bf87/stages/9458f255-dff2-4d86-9a05-69438f49d7f8/decisions/filterByCurrentUser(on='reviewer')
响应
注意: 为了提高可读性,可能缩短了此处显示的响应对象。
HTTP/1.1 200 OK
Content-Type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#Collection(accessReviewInstanceDecisionItem)",
"@odata.count": 1,
"value": [
{
"@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItem",
"id": "139166ec-d214-4835-95aa-3c1d89581e51",
"accessReviewId": "8d035c9d-798d-47fa-beb4-f986a4b8126f",
"reviewedDateTime": "2021-05-03T19:28:25.02Z",
"decision": "Approve",
"justification": "Christie still needs access to the Marketing group as she works in the Marketing organization.",
"appliedDateTime": null,
"applyResult": "New",
"recommendation": "Deny",
"principalLink": "https://graph.microsoft.com/v1.0/users/1800bb2c-955d-4205-8471-3a6c3116435d",
"resourceLink": null,
"resource": null,
"reviewedBy": {
"id": "36c4c56e-fce3-4e2d-b28e-4ac0c7d2fa10",
"displayName": "MOD Administrator",
"userPrincipalName": "MOD Administrator"
},
"appliedBy": {
"id": "00000000-0000-0000-0000-000000000000",
"displayName": "",
"userPrincipalName": ""
},
"target": {
"@odata.type": "#microsoft.graph.accessReviewInstanceDecisionItemUserTarget",
"userId": "1800bb2c-955d-4205-8471-3a6c3116435d",
"userDisplayName": "Christie Cline",
"userPrincipalName": "ChristieC@contoso.com"
},
"principal": {
"@odata.type": "#microsoft.graph.userIdentity",
"id": "1800bb2c-955d-4205-8471-3a6c3116435d",
"displayName": "Christie Cline",
"userPrincipalName": "ChristieC@contoso.com"
}
}
]
}
反馈
提交和查看相关反馈