Grant an access request
Grants a (pending, fully approved) access request.
Closing tasks provisioned outside AccessOwl
This endpoint is the API equivalent of Mark as granted. For an application with no provisioning integration it only closes the record in AccessOwl and never touches the application itself, which is exactly the case where access was granted elsewhere. For an application with a provisioning integration, AccessOwl starts provisioning as soon as the request is fully approved, so there is no manual task to close and this endpoint is not what triggers the integration. If you provision an integrated app yourself, ask AccessOwl support to turn provisioning off on that integration so its tasks become manual admin tasks again.Authorizations
Bearer token authentication. Pass your AccessOwl API token in the Authorization header as Bearer <token>.
Headers
Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.
1 - 255Path Parameters
Access request ID
Response
Access request granted
An access request
Application ID
Access request ID
Requested permission IDs
Request reason
Resource ID
Current status of the access request
pending_approval, pending_permissions_assignment, access_granted, denied, rejected, processing_access, scheduled, pending_dependency Duration of time-based access as an ISO 8601 duration (e.g. "PT1H", "P7D"); null for permanent access
When the time-based access expires; null for permanent access or a time-based request that has not been granted yet
User ID of the grantee
Creation timestamp
Provisioning type
application_admin, automatic User ID of the requestor

