data structure:
| Field | Type | Description |
|---|---|---|
id | string | The UUID of the revocation |
affected_user | object | The user whose access is being revoked |
requested_by | object | The user who initiated the revocation |
application | object | The application the access is being revoked from |
resource | object | The specific resource within the application |
object | object | Deprecated (removed August 2026) — use resource |
revocation_reason | string | The reason provided for the revocation |
created_at | string | ISO 8601 timestamp of when the revocation was created |
- revocation.created
- revocation.rejected
- revocation.revoked
Fired when an access revocation is initiated.
{
"affected_user": {
"email": "john.doe@example.com",
"full_name": "John Doe",
"id": "8b15e986-84ac-4dbc-8e66-c82ebf3d2fc2"
},
"application": {
"id": "c4d5e6f7-a8b9-0123-cdef-456789abcdef",
"tags": [
"Foo",
"Bar",
"Baz"
],
"title": "GitHub"
},
"created_at": "2022-07-13T23:42:00Z",
"id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"object": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"requested_by": {
"email": "admin@example.com",
"full_name": "Admin User",
"id": "5a3e57df-2d08-46be-b5bd-b3ea505a3d26"
},
"resource": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"revocation_reason": "Employee offboarded"
}
Fired when a provisioner is unable to revoke access. This can happen when an integration fails or a manual provisioner rejects the deprovisioning step.The
data object includes additional fields:| Field | Type | Description |
|---|---|---|
provisioner | object | The actor who attempted the revocation |
reject_reason | string | The reason given for the rejection |
rejected_at | string | ISO 8601 timestamp of when the revocation was rejected |
{
"affected_user": {
"email": "john.doe@example.com",
"full_name": "John Doe",
"id": "8b15e986-84ac-4dbc-8e66-c82ebf3d2fc2"
},
"application": {
"id": "c4d5e6f7-a8b9-0123-cdef-456789abcdef",
"tags": [
"Foo",
"Bar",
"Baz"
],
"title": "GitHub"
},
"created_at": "2022-07-12T23:42:00Z",
"id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"object": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"provisioner": {
"email": "provisioner@example.com",
"full_name": "Provisioner User",
"id": "7c9e1f2a-3b4d-5e6f-8a9b-0c1d2e3f4a5b",
"type": "manual"
},
"reject_reason": "Access not available for this resource",
"rejected_at": "2022-07-13T23:42:00Z",
"requested_by": {
"email": "admin@example.com",
"full_name": "Admin User",
"id": "5a3e57df-2d08-46be-b5bd-b3ea505a3d26"
},
"resource": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"revocation_reason": "Employee offboarded"
}
Fired when access has been successfully revoked.The
data object includes additional fields:| Field | Type | Description |
|---|---|---|
provisioner | object | The actor who performed the revocation, including a type field (manual or automation) |
revoked_at | string | ISO 8601 timestamp of when access was revoked |
{
"affected_user": {
"email": "john.doe@example.com",
"full_name": "John Doe",
"id": "8b15e986-84ac-4dbc-8e66-c82ebf3d2fc2"
},
"application": {
"id": "c4d5e6f7-a8b9-0123-cdef-456789abcdef",
"tags": [
"Foo",
"Bar",
"Baz"
],
"title": "GitHub"
},
"created_at": "2022-07-12T23:42:00Z",
"id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
"object": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"provisioner": {
"email": "provisioner@example.com",
"full_name": "Provisioner User",
"id": "7c9e1f2a-3b4d-5e6f-8a9b-0c1d2e3f4a5b",
"type": "manual"
},
"requested_by": {
"email": "admin@example.com",
"full_name": "Admin User",
"id": "5a3e57df-2d08-46be-b5bd-b3ea505a3d26"
},
"resource": {
"id": "d5e6f7a8-b9c0-1234-defa-56789abcdef0",
"title": "Engineering Team"
},
"revocation_reason": "Employee offboarded",
"revoked_at": "2022-07-13T23:42:00Z"
}