requests

Create and act upon role requests

📄️List user requests

Get the request queue for the user. The all filter additionally requires admin or requests-view.

📄️Create a request

Add a workflow to the request queue. Mobile dispatch is asynchronous: 201 does not confirm delivery, and dispatch failure does not return 503. On-behalf requests require workflows-requests-on-behalf.

📄️Get a request

Gets a request object by ID. A missing request returns 400 BAD_REQUEST.

📄️Delete a request

Delete a request item by ID. Mobile transaction cleanup is best effort and does not add gateway error responses.

📄️Set request decision

Update a request in queue. Only users with matching role are permitted to change the status of a step requiring such role. The caller cannot be the requester or target user. Subsequent mobile dispatch is asynchronous; dispatch/cleanup failures do not return 503.

📄️Request role revocation

Revoke the target user role. Only original approvers of the request can revoke a role this way. Ineligible callers receive 400 BAD_REQUEST.

📄️Find requests

Find access requests. The all filter additionally requires admin or requests-view.