Create an access revocation
Creates a revocation for the access identified by access_state_id. For a resource-scoped access state, produces one revocation against that resource.For an app-wide access state (no resource), produces the equivalent app-wide revocation.
Completing a revocation
This endpoint starts a revocation, but there is no endpoint to mark one complete. For an application without a provisioning integration, the revocation stays pending until someone uses Mark as removed in the UI (on the user profile, under Revocations in progress, click the magnifying glass next to the app, then the three-dot menu).Authorizations
Bearer token authentication. Pass your AccessOwl API token in the Authorization header as Bearer <token>.
Headers
Optional key (1–255 chars) for safely retrying a request. Reusing the same key for the same request returns 409 Conflict and is not processed again — this confirms the request was already received. Keys are retained for 14 days.
1 - 255Body
Access revocation parameters
Response
Access revocation created
An access revocation
Application ID
Access revocation ID
Revocation reason
Current status of the revocation
processing_access, rejected, revoked User ID of the grantee
Creation timestamp
Permission IDs being revoked
Provisioning type
application_admin, automatic User ID of the requestor
Resource ID (null for app-wide revocations)

