Skip to main content
GET
Get an access request

Authorizations

Authorization
string
header
required

Bearer token authentication. Pass your AccessOwl API token in the Authorization header as Bearer <token>.

Path Parameters

id
string<uuid>
required

Access request ID

Response

Access request

An access request

application_id
string<uuid>
required

Application ID

id
string<uuid>
required

Access request ID

permission_ids
string<uuid>[]
required

Requested permission IDs

request_reason
string
required

Request reason

resource_id
string<uuid>
required

Resource ID

status
enum<string>
required

Current status of the access request

Available options:
pending_approval,
pending_permissions_assignment,
access_granted,
denied,
rejected,
processing_access,
scheduled,
pending_dependency
approval_steps
ApprovalStep · object[]

The ordered approval steps with their approvers and decisions. Empty for auto-approved requests.

duration
string | null

Duration of time-based access as an ISO 8601 duration (e.g. "PT1H", "P7D"); null for permanent access

expires_at
string<date-time> | null

When the time-based access expires; null for permanent access or a time-based request that has not been granted yet

grantee_user_id
string<uuid>

User ID of the grantee

inserted_at
string<date-time>

Creation timestamp

provisioning_type
enum<string> | null

Provisioning type

Available options:
application_admin,
automatic
requestor_user_id
string<uuid>

User ID of the requestor

termination_reason
string | null

Reason the request was ended: the denial reason when denied, the provisioner's rejection reason when rejected; null otherwise. The status field says which kind it was.

Last modified on September 12, 2026