@sailpoint/api-client 2.2.37 → 2.2.39

package/dist/access_requests/api.d.ts

@@ -158,6 +158,12 @@ export interface AccessRequestAdminItemStatus {
      * @memberof AccessRequestAdminItemStatus
      */
     'approvalDetails'?: Array<ApprovalStatusDto>;
+    /**
+     * List of approval IDs associated with the request.
+     * @type {Array<string>}
+     * @memberof AccessRequestAdminItemStatus
+     */
+    'approvalIds'?: Array<string> | null;
     /**
      * Manual work items created for provisioning the item.
      * @type {Array<ManualWorkItemDetails>}
@@ -825,6 +831,12 @@ export type ApprovalScheme = typeof ApprovalScheme[keyof typeof ApprovalScheme];
  * @interface ApprovalStatusDto
  */
 export interface ApprovalStatusDto {
+    /**
+     * Unique identifier for the approval. May be null; use the `approvalIds` list on the item status to get the populated approval IDs.
+     * @type {string}
+     * @memberof ApprovalStatusDto
+     */
+    'approvalId'?: string | null;
     /**
      * True if the request for this item was forwarded from one owner to another.
      * @type {boolean}
@@ -2872,7 +2884,6 @@ export declare const AccessRequestsApiAxiosParamCreator: (configuration?: Config
     /**
      * Use this API to get access request statuses of all the access requests in the org based on the specified query  parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get  the  access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).
      * @summary Access request status for administrators
-     * @param {string} xSailPointExperimental Use this header to enable this experimental API.
      * @param {string} [requestedFor] Filter the results by the identity the requests were made for. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
      * @param {string} [requestedBy] Filter the results by the identity who made the requests. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
      * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. *me* indicates the current user. Mutually exclusive with *requested-for* and *requested-by*.
@@ -2883,10 +2894,11 @@ export declare const AccessRequestsApiAxiosParamCreator: (configuration?: Config
      * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
      * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
      * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
      * @param {*} [axiosOptions] Override http request option.
      * @throws {RequiredError}
      */
-    listAdministratorsAccessRequestStatusV1: (xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
+    listAdministratorsAccessRequestStatusV1: (requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig) => Promise<RequestArgs>;
     /**
      * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.
      * @summary Get accounts selections for identity
@@ -3005,7 +3017,6 @@ export declare const AccessRequestsApiFp: (configuration?: Configuration) => {
     /**
      * Use this API to get access request statuses of all the access requests in the org based on the specified query  parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get  the  access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).
      * @summary Access request status for administrators
-     * @param {string} xSailPointExperimental Use this header to enable this experimental API.
      * @param {string} [requestedFor] Filter the results by the identity the requests were made for. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
      * @param {string} [requestedBy] Filter the results by the identity who made the requests. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
      * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. *me* indicates the current user. Mutually exclusive with *requested-for* and *requested-by*.
@@ -3016,10 +3027,11 @@ export declare const AccessRequestsApiFp: (configuration?: Configuration) => {
      * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
      * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
      * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
+     * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
      * @param {*} [axiosOptions] Override http request option.
      * @throws {RequiredError}
      */
-    listAdministratorsAccessRequestStatusV1(xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccessRequestAdminItemStatus>>>;
+    listAdministratorsAccessRequestStatusV1(requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccessRequestAdminItemStatus>>>;
     /**
      * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.
      * @summary Get accounts selections for identity
@@ -3132,7 +3144,7 @@ export declare const AccessRequestsApiFactory: (configuration?: Configuration, b
      * @param {*} [axiosOptions] Override http request option.
      * @throws {RequiredError}
      */
-    listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<AccessRequestAdminItemStatus>>;
+    listAdministratorsAccessRequestStatusV1(requestParameters?: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<AccessRequestAdminItemStatus>>;
     /**
      * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.
      * @summary Get accounts selections for identity
@@ -3329,12 +3341,6 @@ export interface AccessRequestsApiListAccessRequestStatusV1Request {
  * @interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request
  */
 export interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request {
-    /**
-     * Use this header to enable this experimental API.
-     * @type {string}
-     * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1
-     */
-    readonly xSailPointExperimental: string;
     /**
      * Filter the results by the identity the requests were made for. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
      * @type {string}
@@ -3395,6 +3401,12 @@ export interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request
      * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1
      */
     readonly requestState?: string;
+    /**
+     * Use this header to enable this experimental API.
+     * @type {string}
+     * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1
+     */
+    readonly xSailPointExperimental?: string;
 }
 /**
  * Request parameters for loadAccountSelectionsV1 operation in AccessRequestsApi.
@@ -3543,7 +3555,7 @@ export declare class AccessRequestsApi extends BaseAPI {
      * @throws {RequiredError}
      * @memberof AccessRequestsApi
      */
-    listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<AccessRequestAdminItemStatus[], any>>;
+    listAdministratorsAccessRequestStatusV1(requestParameters?: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): Promise<import("axios").AxiosResponse<AccessRequestAdminItemStatus[], any>>;
     /**
      * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.
      * @summary Get accounts selections for identity

package/dist/access_requests/api.js

@@ -671,7 +671,6 @@ var AccessRequestsApiAxiosParamCreator = function (configuration) {
         /**
          * Use this API to get access request statuses of all the access requests in the org based on the specified query  parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get  the  access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).
          * @summary Access request status for administrators
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
          * @param {string} [requestedFor] Filter the results by the identity the requests were made for. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
          * @param {string} [requestedBy] Filter the results by the identity who made the requests. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
          * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. *me* indicates the current user. Mutually exclusive with *requested-for* and *requested-by*.
@@ -682,10 +681,11 @@ var AccessRequestsApiAxiosParamCreator = function (configuration) {
          * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
          * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
          * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        listAdministratorsAccessRequestStatusV1: function (xSailPointExperimental, requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions) {
+        listAdministratorsAccessRequestStatusV1: function (requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, xSailPointExperimental, axiosOptions) {
             if (axiosOptions === void 0) { axiosOptions = {}; }
             return __awaiter(_this, void 0, void 0, function () {
                 var localVarPath, localVarUrlObj, baseOptions, localVarRequestOptions, localVarHeaderParameter, localVarQueryParameter, headersFromBaseOptions;
@@ -693,8 +693,6 @@ var AccessRequestsApiAxiosParamCreator = function (configuration) {
                     if (xSailPointExperimental === undefined) {
                         xSailPointExperimental = 'true';
                     }
-                    // verify required parameter 'xSailPointExperimental' is not null or undefined
-                    (0, common_1.assertParamExists)('listAdministratorsAccessRequestStatusV1', 'xSailPointExperimental', xSailPointExperimental);
                     localVarPath = "/access-request-administration/v1";
                     localVarUrlObj = new URL(localVarPath, common_1.DUMMY_BASE_URL);
                     if (configuration) {
@@ -1093,7 +1091,6 @@ var AccessRequestsApiFp = function (configuration) {
         /**
          * Use this API to get access request statuses of all the access requests in the org based on the specified query  parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get  the  access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).
          * @summary Access request status for administrators
-         * @param {string} xSailPointExperimental Use this header to enable this experimental API.
          * @param {string} [requestedFor] Filter the results by the identity the requests were made for. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
          * @param {string} [requestedBy] Filter the results by the identity who made the requests. *me* indicates the current user. Mutually exclusive with *regarding-identity*.
          * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. *me* indicates the current user. Mutually exclusive with *requested-for* and *requested-by*.
@@ -1104,16 +1101,17 @@ var AccessRequestsApiFp = function (configuration) {
          * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results)  Filtering is supported for the following fields and operators:  **accountActivityItemId**: *eq, in, ge, gt, le, lt, ne, isnull, sw*  **accessRequestId**: *in, eq, ne, ge, gt, le, lt, sw*  **status**: *in, eq, ne*  **created**: *eq, in, ge, gt, le, lt, ne, isnull, sw*
          * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results)  Sorting is supported for the following fields: **created, modified, accountActivityItemId, name, accessRequestId**
          * @param {string} [requestState] Filter the results by the state of the request. The only valid value is *EXECUTING*.
+         * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.
          * @param {*} [axiosOptions] Override http request option.
          * @throws {RequiredError}
          */
-        listAdministratorsAccessRequestStatusV1: function (xSailPointExperimental, requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions) {
+        listAdministratorsAccessRequestStatusV1: function (requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, xSailPointExperimental, axiosOptions) {
             var _a, _b, _c;
             return __awaiter(this, void 0, void 0, function () {
                 var localVarAxiosArgs, localVarOperationServerIndex, localVarOperationServerBasePath;
                 return __generator(this, function (_d) {
                     switch (_d.label) {
-                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listAdministratorsAccessRequestStatusV1(xSailPointExperimental, requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions)];
+                        case 0: return [4 /*yield*/, localVarAxiosParamCreator.listAdministratorsAccessRequestStatusV1(requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, xSailPointExperimental, axiosOptions)];
                         case 1:
                             localVarAxiosArgs = _d.sent();
                             localVarOperationServerIndex = (_a = configuration === null || configuration === void 0 ? void 0 : configuration.serverIndex) !== null && _a !== void 0 ? _a : 0;
@@ -1305,7 +1303,8 @@ var AccessRequestsApiFactory = function (configuration, basePath, axios) {
          * @throws {RequiredError}
          */
         listAdministratorsAccessRequestStatusV1: function (requestParameters, axiosOptions) {
-            return localVarFp.listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then(function (request) { return request(axios, basePath); });
+            if (requestParameters === void 0) { requestParameters = {}; }
+            return localVarFp.listAdministratorsAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, requestParameters.xSailPointExperimental, axiosOptions).then(function (request) { return request(axios, basePath); });
         },
         /**
          * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.
@@ -1472,7 +1471,8 @@ var AccessRequestsApi = /** @class */ (function (_super) {
      */
     AccessRequestsApi.prototype.listAdministratorsAccessRequestStatusV1 = function (requestParameters, axiosOptions) {
         var _this = this;
-        return (0, exports.AccessRequestsApiFp)(this.configuration).listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
+        if (requestParameters === void 0) { requestParameters = {}; }
+        return (0, exports.AccessRequestsApiFp)(this.configuration).listAdministratorsAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, requestParameters.xSailPointExperimental, axiosOptions).then(function (request) { return request(_this.axios, _this.basePath); });
     };
     /**
      * Use this API to fetch account information for an identity against the items in an access request.  Used to fetch accountSelection for the AccessRequest prior to submitting for async processing.  __Machine identities__  * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry.  * Fields `requestedFor` / `requestedItems` are not supported and should be omitted.  * Only `ENTITLEMENT` items are supported.  * Mixed human and machine identities in one request are not supported.  * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create.  * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected).  * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply.