Access Reports

The Access Reports API is a convenient way of generating reports on users and resources for your team. You can use Okta Workflows to interact with these operations and store generated reports in a Workflows Table.

List all access reports
Admin roles:
  • security_admin

Lists all access reports

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

Responses
200

OK

get/v1/teams/{team_name}/access_reports
Request samples
Response samples
application/json
{
  • "list": [
    • [
      ]
    ]
}

Create an access report
Admin roles:
  • security_admin

Create an access report. Each report must be connected to a specific user or resource.

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

Request Body schema: application/json
One of:
object
id
string <regex> (AccessReportTargetID) ^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-...

The UUID of an existing Okta Privileged Access user or resource

resource_type_filter
string (AccessReportTargetResourceType)

The type of resource associated with the access report

Value: "server"
Responses
201

Created

post/v1/teams/{team_name}/access_reports
Request samples
application/json
{
  • "user": {
    • "id": "5fdf5ae9-e4db-4aae-8127-c2ebffe747f6",
    • "resource_type_filter": "server"
    }
}
Response samples
application/json
{
  • "created_at": "2023-08-25T12:00:00.000000Z",
  • "details": {
    • "user": {
      }
    },
  • "id": "5fdf5ae9-e71b-423e-8a87-c2ebffe407f6",
  • "status": "COMPLETED",
  • "updated_at": "2023-08-25T12:00:00.000000Z"
}

Retrieve an access report
Admin roles:
  • security_admin

Retrieve the metadata of the specified access report

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

access_report_id
required
string

The UUID of an access report

Responses
200

OK

get/v1/teams/{team_name}/access_reports/{access_report_id}
Request samples
Response samples
application/json
{
  • "created_at": "2023-08-25T12:00:00.000000Z",
  • "details": {
    • "user": {
      }
    },
  • "id": "5fdf5ae9-e71b-423e-8a87-c2ebffe407f6",
  • "status": "COMPLETED",
  • "updated_at": "2023-08-25T12:00:00.000000Z"
}

Download an access report
Admin roles:
  • security_admin

Downloads the specific access report for review. The CSV formatted report is included in the response.

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

access_report_id
required
string

The UUID of an access report

Responses
200

OK

get/v1/teams/{team_name}/access_reports/{access_report_id}/report
Request samples