npm - @sailpoint/api-client - Versions diffs - 2.2.9 → 2.2.11 - Mend

@sailpoint/api-client 2.2.9 → 2.2.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

package/dist/access_requests/api.d.ts +3 -3
package/dist/access_requests/api.js.map +1 -1
package/dist/entitlements/api.d.ts +3 -3
package/dist/entitlements/api.js.map +1 -1
package/dist/esm/nerm/common.js +2 -2
package/dist/esm/nermv2025/common.js +2 -2
package/dist/esm/sources/api.js +20 -21
package/dist/nerm/common.js +2 -2
package/dist/nerm/common.js.map +1 -1
package/dist/nermv2025/common.js +2 -2
package/dist/nermv2025/common.js.map +1 -1
package/dist/sources/api.d.ts +126 -127
package/dist/sources/api.js +21 -22
package/dist/sources/api.js.map +1 -1
package/package.json +1 -1

package/dist/access_requests/api.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"api.js","sourceRoot":"","sources":["../../access_requests/api.ts"],"names":[],"mappings":";AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,gDAAgC;AAChC,yDAAyD;AACzD,aAAa;AACb,mCAA4N;AAE5N,aAAa;AACb,+BAAmG;AA4BtF,QAAA,2BAA2B,GAAG;IACvC,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,4BAA4B,GAAG;IACxC,QAAQ,EAAE,UAAU;CACd,CAAC;AA2NE,QAAA,oCAAoC,GAAG;IAChD,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAGE,QAAA,4CAA4C,GAAG;IACxD,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAwJE,QAAA,yBAAyB,GAAG;IACrC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AA6FE,QAAA,4BAA4B,GAAG;IACxC,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,cAAc;CACrB,CAAC;AAGE,QAAA,6BAA6B,GAAG;IACzC,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;CACV,CAAC;AAsDX;;;;GAIG;AAEU,QAAA,iBAAiB,GAAG;IAC7B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;CACvB,CAAC;AA+LX;;;;GAIG;AAEU,QAAA,cAAc,GAAG;IAC1B,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,YAAY;IACvB,kBAAkB,EAAE,sBAAsB;IAC1C,gBAAgB,EAAE,mBAAmB;IACrC,eAAe,EAAE,kBAAkB;CAC7B,CAAC;AA8FE,QAAA,qCAAqC,GAAG;IACjD,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,sCAAsC,GAAG;IAClD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AAsHE,QAAA,qCAAqC,GAAG;IACjD,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;CAChB,CAAC;AAGE,QAAA,sCAAsC,GAAG;IAClD,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;CACZ,CAAC;AAuDE,QAAA,wBAAwB,GAAG;IACpC,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX;;;;GAIG;AAEU,QAAA,OAAO,GAAG;IACnB,wBAAwB,EAAE,4BAA4B;IACtD,aAAa,EAAE,gBAAgB;IAC/B,qBAAqB,EAAE,yBAAyB;IAChD,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,iBAAiB;IACjC,aAAa,EAAE,eAAe;IAC9B,OAAO,EAAE,SAAS;IAClB,eAAe,EAAE,kBAAkB;IACnC,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;IACpB,eAAe,EAAE,kBAAkB;IACnC,eAAe,EAAE,kBAAkB;IACnC,eAAe,EAAE,kBAAkB;IACnC,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,iBAAiB;IACjC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,WAAW,EAAE,cAAc;IAC3B,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,kBAAkB;IACnC,SAAS,EAAE,WAAW;CAChB,CAAC;AA0EE,QAAA,oEAAoE,GAAG;IAChF,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACV,CAAC;AAwBE,QAAA,yCAAyC,GAAG;IACrD,gBAAgB,EAAE,mBAAmB;IACrC,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AA2YX;;;;GAIG;AAEU,QAAA,YAAY,GAAG;IACxB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACZ,CAAC;AA4EE,QAAA,yCAAyC,GAAG;IACrD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,0CAA0C,GAAG;IACtD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX;;;;GAIG;AAEU,QAAA,mBAAmB,GAAG;IAC/B,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;CACd,CAAC;AA+BE,QAAA,gBAAgB,GAAG;IAC5B,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,qCAAqC,GAAG;IACjD,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACd,CAAC;AAiBX;;;;GAIG;AAEU,QAAA,gBAAgB,GAAG;IAC5B,kBAAkB,EAAE,qBAAqB;IACzC,qBAAqB,EAAE,wBAAwB;IAC/C,cAAc,EAAE,iBAAiB;IACjC,oBAAoB,EAAE,wBAAwB;CACxC,CAAC;AAoIE,QAAA,kCAAkC,GAAG;IAC9C,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAsDE,QAAA,sCAAsC,GAAG;IAClD,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAwBE,QAAA,4BAA4B,GAAG;IACxC,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,MAAM;CACN,CAAC;AAkEE,QAAA,2BAA2B,GAAG;IACvC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAsME,QAAA,2BAA2B,GAAG;IACvC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAGE,QAAA,mCAAmC,GAAG;IAC/C,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAkGE,QAAA,wDAAwD,GAAG;IACpE,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACd,CAAC;AAiBX;;;;GAIG;AAEU,QAAA,+BAA+B,GAAG;IAC3C,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,mBAAmB;IACrC,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,+BAA+B,EAAE,mCAAmC;IACpE,QAAQ,EAAE,UAAU;IACpB,kBAAkB,EAAE,qBAAqB;IACzC,sBAAsB,EAAE,2BAA2B;IACnD,KAAK,EAAE,OAAO;CACR,CAAC;AA+BE,QAAA,uCAAuC,GAAG;IACnD,QAAQ,EAAE,UAAU;IACpB,eAAe,EAAE,kBAAkB;CAC7B,CAAC;AAuDE,QAAA,+CAA+C,GAAG;IAC3D,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACR,CAAC;AA+DE,QAAA,oBAAoB,GAAG;IAChC,SAAS,EAAE,YAAY;CACjB,CAAC;AAgFE,QAAA,0CAA0C,GAAG;IACtD,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACR,CAAC;AAyFX;;;GAGG;AACI,IAAM,kCAAkC,GAAG,UAAU,aAA6B;IAAvC,iBAyjBjD;IAxjBG,OAAO;QACH;;;;;;WAMG;QACH,0BAA0B,EAAE,UAAO,wBAAkD,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC3H,gFAAgF;oBAChF,IAAA,0BAAiB,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,wBAAwB,CAAC,CAAA;oBAC/F,YAAY,GAAG,2CAA2C,CAAC;oBAE3D,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,wBAAwB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEpH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,2BAA2B,EAAE,UAAO,uBAAgD,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC1H,+EAA+E;oBAC/E,IAAA,0BAAiB,EAAC,6BAA6B,EAAE,yBAAyB,EAAE,uBAAuB,CAAC,CAAA;oBAC9F,YAAY,GAAG,iCAAiC,CAAC;oBAEjD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEnH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE,UAAO,mBAAwC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC5G,2EAA2E;oBAC3E,IAAA,0BAAiB,EAAC,uBAAuB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAA;oBAChF,YAAY,GAAG,4BAA4B,CAAC;oBAE5C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE/G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,oBAAoB,EAAE,UAAO,kBAAsC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACzG,0EAA0E;oBAC1E,IAAA,0BAAiB,EAAC,sBAAsB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAA;oBAC7E,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,kBAAkB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE9G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE,UAAO,aAA4B,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAChG,qEAAqE;oBACrE,IAAA,0BAAiB,EAAC,uBAAuB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;oBACpE,YAAY,GAAG,qBAAqB,CAAC;oBAErC,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,aAAa,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEzG,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,wBAAwB,EAAE,UAAO,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/D,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;WAKG;QACH,wBAAwB,EAAE,UAAO,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/D,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,kCAAkC,EAAE,UAAO,UAAkB,EAAE,aAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC1H,kEAAkE;oBAClE,IAAA,0BAAiB,EAAC,oCAAoC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;oBACjF,qEAAqE;oBACrE,IAAA,0BAAiB,EAAC,oCAAoC,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;oBACjF,YAAY,GAAG,uBAAuB;yBACvC,OAAO,CAAC,WAAI,YAAY,MAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;yBACpE,OAAO,CAAC,WAAI,eAAe,MAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBAE1E,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE,UAAO,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC3Q,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAEzC,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAED,IAAI,WAAW,KAAK,SAAS,EAAE;wBAC3B,sBAAsB,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;qBACxD;oBAED,IAAI,iBAAiB,KAAK,SAAS,EAAE;wBACjC,sBAAsB,CAAC,oBAAoB,CAAC,GAAG,iBAAiB,CAAC;qBACpE;oBAED,IAAI,UAAU,KAAK,SAAS,EAAE;wBAC1B,sBAAsB,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;qBACtD;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,sBAAsB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;qBAC7C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAID,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,uCAAuC,EAAE,UAAO,sBAA8B,EAAE,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/T,IAAI,sBAAsB,KAAK,SAAS,EAAE;wBACtC,sBAAsB,GAAG,MAAM,CAAC;qBACnC;oBAED,8EAA8E;oBAC9E,IAAA,0BAAiB,EAAC,yCAAyC,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAA;oBACxG,YAAY,GAAG,mCAAmC,CAAC;oBAEnD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAEzC,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAED,IAAI,WAAW,KAAK,SAAS,EAAE;wBAC3B,sBAAsB,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;qBACxD;oBAED,IAAI,iBAAiB,KAAK,SAAS,EAAE;wBACjC,sBAAsB,CAAC,oBAAoB,CAAC,GAAG,iBAAiB,CAAC;qBACpE;oBAED,IAAI,UAAU,KAAK,SAAS,EAAE;wBAC1B,sBAAsB,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;qBACtD;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,sBAAsB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;qBAC7C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAID,IAAI,sBAAsB,IAAI,IAAI,EAAE;wBAChC,uBAAuB,CAAC,0BAA0B,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;qBACxF;oBACD,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,uBAAuB,EAAE,UAAO,wBAAkD,EAAE,sBAA+B,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACzJ,gFAAgF;oBAChF,IAAA,0BAAiB,EAAC,yBAAyB,EAAE,0BAA0B,EAAE,wBAAwB,CAAC,CAAA;oBAClG,IAAI,sBAAsB,KAAK,SAAS,EAAE;wBACtC,sBAAsB,GAAG,MAAM,CAAC;qBACnC;oBAEK,YAAY,GAAG,wCAAwC,CAAC;oBAExD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAI,sBAAsB,IAAI,IAAI,EAAE;wBAChC,uBAAuB,CAAC,0BAA0B,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;qBACxF;oBACD,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,wBAAwB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEpH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,wBAAwB,EAAE,UAAO,mBAAwC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/G,2EAA2E;oBAC3E,IAAA,0BAAiB,EAAC,0BAA0B,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAA;oBACnF,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE/G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,wBAAwB,EAAE,UAAO,oBAA0C,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACjH,4EAA4E;oBAC5E,IAAA,0BAAiB,EAAC,0BAA0B,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAA;oBACrF,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,oBAAoB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEhH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;KACJ,CAAA;AACL,CAAC,CAAC;AAzjBW,QAAA,kCAAkC,sCAyjB7C;AAEF;;;GAGG;AACI,IAAM,mBAAmB,GAAG,UAAS,aAA6B;IACrE,IAAM,yBAAyB,GAAG,IAAA,0CAAkC,EAAC,aAAa,CAAC,CAAA;IACnF,OAAO;QACH;;;;;;WAMG;QACG,0BAA0B,YAAC,wBAAkD,EAAE,YAAoC;;;;;;gCAC3F,qBAAM,yBAAyB,CAAC,0BAA0B,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAAA;;4BAAtH,iBAAiB,GAAG,SAAkG;4BACtH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,8CAA8C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAChJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,2BAA2B,YAAC,uBAAgD,EAAE,YAAoC;;;;;;gCAC1F,qBAAM,yBAAyB,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,YAAY,CAAC,EAAA;;4BAAtH,iBAAiB,GAAG,SAAkG;4BACtH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,+CAA+C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BACjJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,qBAAqB,YAAC,mBAAwC,EAAE,YAAoC;;;;;;gCAC5E,qBAAM,yBAAyB,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAA;;4BAA5G,iBAAiB,GAAG,SAAwF;4BAC5G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,yCAAyC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC3I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,oBAAoB,YAAC,kBAAsC,EAAE,YAAoC;;;;;;gCACzE,qBAAM,yBAAyB,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,YAAY,CAAC,EAAA;;4BAA1G,iBAAiB,GAAG,SAAsF;4BAC1G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,wCAAwC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC1I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,qBAAqB,YAAC,aAA4B,EAAE,YAAoC;;;;;;gCAChE,qBAAM,yBAAyB,CAAC,qBAAqB,CAAC,aAAa,EAAE,YAAY,CAAC,EAAA;;4BAAtG,iBAAiB,GAAG,SAAkF;4BACtG,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,yCAAyC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC3I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,wBAAwB,YAAC,YAAoC;;;;;;gCACrC,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAA;;4BAA1F,iBAAiB,GAAG,SAAsE;4BAC1F,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;WAKG;QACG,wBAAwB,YAAC,YAAoC;;;;;;gCACrC,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAA;;4BAA1F,iBAAiB,GAAG,SAAsE;4BAC1F,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,kCAAkC,YAAC,UAAkB,EAAE,aAAqB,EAAE,YAAoC;;;;;;gCAC1F,qBAAM,yBAAyB,CAAC,kCAAkC,CAAC,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,EAAA;;4BAA/H,iBAAiB,GAAG,SAA2G;4BAC/H,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,sDAAsD,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BACxJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;;;;;;;;;WAeG;QACG,yBAAyB,YAAC,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAoC;;;;;;gCACjP,qBAAM,yBAAyB,CAAC,yBAAyB,CAAC,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,EAAA;;4BAA3M,iBAAiB,GAAG,SAAuL;4BAC3M,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,6CAA6C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC/I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;;;;;;;;;;WAgBG;QACG,uCAAuC,YAAC,sBAA8B,EAAE,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAoC;;;;;;gCAC/R,qBAAM,yBAAyB,CAAC,uCAAuC,CAAC,sBAAsB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,EAAA;;4BAAjP,iBAAiB,GAAG,SAA6N;4BACjP,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,2DAA2D,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC7J,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,uBAAuB,YAAC,wBAAkD,EAAE,sBAA+B,EAAE,YAAoC;;;;;;gCACzH,qBAAM,yBAAyB,CAAC,uBAAuB,CAAC,wBAAwB,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAA;;4BAA3I,iBAAiB,GAAG,SAAuH;4BAC3I,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,2CAA2C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC7I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,wBAAwB,YAAC,mBAAwC,EAAE,YAAoC;;;;;;gCAC/E,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAA;;4BAA/G,iBAAiB,GAAG,SAA2F;4BAC/G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,wBAAwB,YAAC,oBAA0C,EAAE,YAAoC;;;;;;gCACjF,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAA;;4BAAhH,iBAAiB,GAAG,SAA4F;4BAChH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;KACJ,CAAA;AACL,CAAC,CAAC;AAlMW,QAAA,mBAAmB,uBAkM9B;AAEF;;;GAGG;AACI,IAAM,wBAAwB,GAAG,UAAU,aAA6B,EAAE,QAAiB,EAAE,KAAqB;IACrH,IAAM,UAAU,GAAG,IAAA,2BAAmB,EAAC,aAAa,CAAC,CAAA;IACrD,OAAO;QACH;;;;;;WAMG;QACH,0BAA0B,YAAC,iBAAqE,EAAE,YAAoC;YAClI,OAAO,UAAU,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvJ,CAAC;QACD;;;;;;WAMG;QACH,2BAA2B,YAAC,iBAAsE,EAAE,YAAoC;YACpI,OAAO,UAAU,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvJ,CAAC;QACD;;;;;;WAMG;QACH,qBAAqB,YAAC,iBAAgE,EAAE,YAAoC;YACxH,OAAO,UAAU,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC7I,CAAC;QACD;;;;;;WAMG;QACH,oBAAoB,YAAC,iBAA+D,EAAE,YAAoC;YACtH,OAAO,UAAU,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC3I,CAAC;QACD;;;;;;WAMG;QACH,qBAAqB,YAAC,iBAAgE,EAAE,YAAoC;YACxH,OAAO,UAAU,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvI,CAAC;QACD;;;;;;WAMG;QACH,wBAAwB,YAAC,YAAoC;YACzD,OAAO,UAAU,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACzG,CAAC;QACD;;;;;WAKG;QACH,wBAAwB,YAAC,YAAoC;YACzD,OAAO,UAAU,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACzG,CAAC;QACD;;;;;;WAMG;QACH,kCAAkC,YAAC,iBAA6E,EAAE,YAAoC;YAClJ,OAAO,UAAU,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAClL,CAAC;QACD;;;;;;WAMG;QACH,yBAAyB,YAAC,iBAAyE,EAAE,YAAoC;YAA/G,kCAAA,EAAA,sBAAyE;YAC/F,OAAO,UAAU,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC9Y,CAAC;QACD;;;;;;WAMG;QACH,uCAAuC,YAAC,iBAAkF,EAAE,YAAoC;YAC5J,OAAO,UAAU,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACtc,CAAC;QACD;;;;;;WAMG;QACH,uBAAuB,YAAC,iBAAkE,EAAE,YAAoC;YAC5H,OAAO,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC9L,CAAC;QACD;;;;;;;WAOG;QACH,wBAAwB,YAAC,iBAAmE,EAAE,YAAoC;YAC9H,OAAO,UAAU,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAChJ,CAAC;QACD;;;;;;WAMG;QACH,wBAAwB,YAAC,iBAAmE,EAAE,YAAoC;YAC9H,OAAO,UAAU,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACjJ,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAtIW,QAAA,wBAAwB,4BAsInC;AA+SF;;;;;GAKG;AACH;IAAuC,qCAAO;IAA9C;;IA4JA,CAAC;IA3JG;;;;;;;OAOG;IACI,sDAA0B,GAAjC,UAAkC,iBAAqE,EAAE,YAAoC;QAA7I,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9L,CAAC;IAED;;;;;;;OAOG;IACI,uDAA2B,GAAlC,UAAmC,iBAAsE,EAAE,YAAoC;QAA/I,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9L,CAAC;IAED;;;;;;;OAOG;IACI,iDAAqB,GAA5B,UAA6B,iBAAgE,EAAE,YAAoC;QAAnI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACpL,CAAC;IAED;;;;;;;OAOG;IACI,gDAAoB,GAA3B,UAA4B,iBAA+D,EAAE,YAAoC;QAAjI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAClL,CAAC;IAED;;;;;;;OAOG;IACI,iDAAqB,GAA5B,UAA6B,iBAAgE,EAAE,YAAoC;QAAnI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9K,CAAC;IAED;;;;;;;OAOG;IACI,oDAAwB,GAA/B,UAAgC,YAAoC;QAApE,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;OAMG;IACI,oDAAwB,GAA/B,UAAgC,YAAoC;QAApE,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;;OAOG;IACI,8DAAkC,GAAzC,UAA0C,iBAA6E,EAAE,YAAoC;QAA7J,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACzN,CAAC;IAED;;;;;;;OAOG;IACI,qDAAyB,GAAhC,UAAiC,iBAAyE,EAAE,YAAoC;QAAhJ,iBAEC;QAFgC,kCAAA,EAAA,sBAAyE;QACtG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACrb,CAAC;IAED;;;;;;;OAOG;IACI,mEAAuC,GAA9C,UAA+C,iBAAkF,EAAE,YAAoC;QAAvK,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC7e,CAAC;IAED;;;;;;;OAOG;IACI,mDAAuB,GAA9B,UAA+B,iBAAkE,EAAE,YAAoC;QAAvI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACrO,CAAC;IAED;;;;;;;;OAQG;IACI,oDAAwB,GAA/B,UAAgC,iBAAmE,EAAE,YAAoC;QAAzI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACvL,CAAC;IAED;;;;;;;OAOG;IACI,oDAAwB,GAA/B,UAAgC,iBAAmE,EAAE,YAAoC;QAAzI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACxL,CAAC;IACL,wBAAC;AAAD,CAAC,AA5JD,CAAuC,cAAO,GA4J7C;AA5JY,8CAAiB","sourcesContent":["/* tslint:disable /\n/ eslint-disable /\n/\n Identity Security Cloud API - Access Requests\n * Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.\n \n The version of the OpenAPI document: v1\n * \n \n NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).\n * https://openapi-generator.tech\n * Do not edit the class manually.\n /\n\n\nimport type { Configuration } from '../configuration';\nimport type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';\nimport globalAxios from 'axios';\n// Some imports not used depending on template conditions\n// @ts-ignore\nimport { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction } from './common';\nimport type { RequestArgs } from './base';\n// @ts-ignore\nimport { BASE_PATH, COLLECTION_FORMATS, BaseAPI, RequiredError, operationServerMap } from './base';\n\n/\n Access item requester\\'s identity.\n * @export\n * @interface AccessItemRequester\n /\nexport interface AccessItemRequester {\n /\n Access item requester\\'s DTO type.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'type'?: AccessItemRequesterTypeEnum;\n /\n Access item requester\\'s identity ID.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'id'?: string;\n /\n Access item owner\\'s human-readable display name.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'name'?: string;\n}\n\nexport const AccessItemRequesterTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type AccessItemRequesterTypeEnum = typeof AccessItemRequesterTypeEnum[keyof typeof AccessItemRequesterTypeEnum];\n\n/\n Identity who reviewed the access item request.\n * @export\n * @interface AccessItemReviewedBy\n /\nexport interface AccessItemReviewedBy {\n /\n DTO type of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'type'?: AccessItemReviewedByTypeEnum;\n /\n ID of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'id'?: string;\n /\n Human-readable display name of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'name'?: string;\n}\n\nexport const AccessItemReviewedByTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type AccessItemReviewedByTypeEnum = typeof AccessItemReviewedByTypeEnum[keyof typeof AccessItemReviewedByTypeEnum];\n\n/\n \n * @export\n * @interface AccessRequest\n /\nexport interface AccessRequest {\n /\n A list of Identity IDs for whom the Access is requested. If it\\'s a Revoke request, there can only be one Identity ID. * Used for human identity requests with the \\'requestedItems\\' field. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems` (including all machine identity requests).\n * @type {Array<string>}\n * @memberof AccessRequest\n /\n 'requestedFor'?: Array<string>;\n /\n \n * @type {AccessRequestType}\n * @memberof AccessRequest\n /\n 'requestType'?: AccessRequestType \| null;\n /\n * Used for human identity requests with the \\'requestedFor\\' field. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems`.\n * @type {Array<AccessRequestItem>}\n * @memberof AccessRequest\n /\n 'requestedItems'?: Array<AccessRequestItem>;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities.\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequest\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n Additional submit data structure with requestedFor containing requestedItems allowing distinction for each request item and Identity. * Can only be used when \\'requestedFor\\' and \\'requestedItems\\' are not separately provided * Adds ability to specify which account the user wants the access on, in case they have multiple accounts on a source. * Allows the ability to request items with different start dates and remove dates. * Also allows different combinations of request items and identities in the same request. * For human identities, primarily used with GRANT_ACCESS (and related multi-account flows). Human REVOKE_ACCESS continues to use the flat `requestedFor` / `requestedItems` shape. * Required for machine identity access requests. Set `identityType: MACHINE` on each entry. Machine requests support GRANT_ACCESS, MODIFY_ACCESS, and REVOKE_ACCESS with the constraints documented on the create endpoint and item schemas (entitlement-only; grant/modify account selection; revoke nativeIdentity). \n * @type {Array<RequestedForDtoRef>}\n * @memberof AccessRequest\n /\n 'requestedForWithRequestedItems'?: Array<RequestedForDtoRef> \| null;\n}\n\n\n/\n \n * @export\n * @interface AccessRequestAdminItemStatus\n /\nexport interface AccessRequestAdminItemStatus {\n /\n ID of the access request. This is a new property as of 2025. Older access requests may not have an ID.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'id'?: string \| null;\n /\n Human-readable display name of the item being requested.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'name'?: string \| null;\n /\n Type of requested object.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'type'?: AccessRequestAdminItemStatusTypeEnum \| null;\n /\n \n * @type {RequestedItemStatusCancelledRequestDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'cancelledRequestDetails'?: RequestedItemStatusCancelledRequestDetails;\n /\n List of localized error messages, if any, encountered during the approval/provisioning process.\n * @type {Array<Array<ErrorMessageDto>>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'errorMessages'?: Array<Array<ErrorMessageDto>> \| null;\n /\n \n * @type {RequestedItemStatusRequestState}\n * @memberof AccessRequestAdminItemStatus\n /\n 'state'?: RequestedItemStatusRequestState;\n /\n Approval details for each item.\n * @type {Array<ApprovalStatusDto>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'approvalDetails'?: Array<ApprovalStatusDto>;\n /\n Manual work items created for provisioning the item.\n * @type {Array<ManualWorkItemDetails>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'manualWorkItemDetails'?: Array<ManualWorkItemDetails> \| null;\n /\n Id of associated account activity item.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accountActivityItemId'?: string;\n /\n \n * @type {AccessRequestType}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requestType'?: AccessRequestType \| null;\n /\n When the request was last modified.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'modified'?: string \| null;\n /\n When the request was created.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'created'?: string;\n /\n \n * @type {AccessItemRequester}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requester'?: AccessItemRequester;\n /\n \n * @type {RequestedItemStatusRequestedFor}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requestedFor'?: RequestedItemStatusRequestedFor;\n /\n Type of identity the access was requested for. Requests without a stored identity type are returned as `HUMAN`. \n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'identityType'?: AccessRequestAdminItemStatusIdentityTypeEnum;\n /\n \n * @type {RequestedItemStatusRequesterComment}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requesterComment'?: RequestedItemStatusRequesterComment;\n /\n \n * @type {RequestedItemStatusSodViolationContext}\n * @memberof AccessRequestAdminItemStatus\n /\n 'sodViolationContext'?: RequestedItemStatusSodViolationContext;\n /\n \n * @type {RequestedItemStatusProvisioningDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'provisioningDetails'?: RequestedItemStatusProvisioningDetails;\n /\n \n * @type {RequestedItemStatusPreApprovalTriggerDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'preApprovalTriggerDetails'?: RequestedItemStatusPreApprovalTriggerDetails;\n /\n A list of Phases that the Access Request has gone through in order, to help determine the status of the request.\n * @type {Array<AccessRequestPhases>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accessRequestPhases'?: Array<AccessRequestPhases> \| null;\n /\n Description associated to the requested object.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'description'?: string \| null;\n /\n When the role access is scheduled for provisioning.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'startDate'?: string \| null;\n /\n When the role access is scheduled for removal.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'removeDate'?: string \| null;\n /\n True if the request can be canceled.\n * @type {boolean}\n * @memberof AccessRequestAdminItemStatus\n /\n 'cancelable'?: boolean;\n /\n True if re-auth is required.\n * @type {boolean}\n * @memberof AccessRequestAdminItemStatus\n /\n 'reauthorizationRequired'?: boolean;\n /\n This is the account activity id.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accessRequestId'?: string;\n /\n Arbitrary key-value pairs, if any were included in the corresponding access request\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequestAdminItemStatus\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n \n * @type {RequestedItemStatusForm}\n * @memberof AccessRequestAdminItemStatus\n /\n 'form'?: RequestedItemStatusForm;\n}\n\nexport const AccessRequestAdminItemStatusTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type AccessRequestAdminItemStatusTypeEnum = typeof AccessRequestAdminItemStatusTypeEnum[keyof typeof AccessRequestAdminItemStatusTypeEnum];\nexport const AccessRequestAdminItemStatusIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type AccessRequestAdminItemStatusIdentityTypeEnum = typeof AccessRequestAdminItemStatusIdentityTypeEnum[keyof typeof AccessRequestAdminItemStatusIdentityTypeEnum];\n\n/\n \n * @export\n * @interface AccessRequestConfig\n /\nexport interface AccessRequestConfig {\n /\n If this is true, approvals must be processed by an external system. Also, if this is true, it blocks Request Center access requests and returns an error for any user who isn\\'t an org admin.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'approvalsMustBeExternal'?: boolean;\n /\n If this is true and the requester and reviewer are the same, the request is automatically approved. This field has been moved to the approval configurations. Please use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint instead.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'autoApprovalEnabled'?: boolean;\n /\n If this is true, reauthorization will be enforced for appropriately configured access items. Enablement of this feature is currently in a limited state.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'reauthorizationEnabled'?: boolean;\n /\n \n * @type {RequestOnBehalfOfConfig}\n * @memberof AccessRequestConfig\n /\n 'requestOnBehalfOfConfig'?: RequestOnBehalfOfConfig;\n /\n \n * @type {ApprovalReminderAndEscalationConfig}\n * @memberof AccessRequestConfig\n /\n 'approvalReminderAndEscalationConfig'?: ApprovalReminderAndEscalationConfig;\n /\n \n * @type {EntitlementRequestConfig}\n * @memberof AccessRequestConfig\n /\n 'entitlementRequestConfig'?: EntitlementRequestConfig;\n}\n/\n \n * @export\n * @interface AccessRequestConfig2\n /\nexport interface AccessRequestConfig2 {\n /\n If this is true, approvals must be processed by an external system. Also, if this is true, it blocks Request Center access requests and returns an error for any user who isn\\'t an org admin.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'approvalsMustBeExternal'?: boolean;\n /\n If this is true, reauthorization will be enforced for appropriately configured access items. Enablement of this feature is currently in a limited state.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'reauthorizationEnabled'?: boolean;\n /\n \n * @type {RequestOnBehalfOfConfig2}\n * @memberof AccessRequestConfig2\n /\n 'requestOnBehalfOfConfig'?: RequestOnBehalfOfConfig2;\n /\n \n * @type {EntitlementRequestConfig2}\n * @memberof AccessRequestConfig2\n /\n 'entitlementRequestConfig'?: EntitlementRequestConfig2;\n /\n If this is true, requesters and requested-for users will be able to see the names of governance group members when a request is awaiting the group\\'s approval. Up to the first 10 members of the group will be listed.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'govGroupVisibilityEnabled'?: boolean;\n /\n If this is false, machine identity access requests and machine accounts-selection are rejected with 403 (for example, \\\"Machine identity access request is disabled in access request configuration.\\\"). Defaults to true. Exposed on access-request-config v2 only. \n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'machineIdentityAccessRequestEnabled'?: boolean;\n}\n/\n \n * @export\n * @interface AccessRequestItem\n /\nexport interface AccessRequestItem {\n /\n The type of the item being requested.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'type': AccessRequestItemTypeEnum;\n /\n ID of Role, Access Profile or Entitlement being requested.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'id': string;\n /\n Comment provided by requester. * Comment is required when the request is of type Revoke Access. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'comment'?: string;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities and /access-request-status.\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequestItem\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'startDate'?: string;\n /\n The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'removeDate'?: string;\n /\n The assignmentId for a specific role assignment on the identity. This id is used to revoke that specific roleAssignment on that identity. * For use with REVOKE_ACCESS requests for roles for identities with multiple accounts on a single source. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'assignmentId'?: string \| null;\n /\n The unique identifier for an account on the identity, designated as the account ID attribute in the source\\'s account schema. This is used to revoke a specific attributeAssignment on the identity. * For use with REVOKE_ACCESS requests for entitlements for identities with multiple accounts on a single source. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'nativeIdentity'?: string \| null;\n /\n Optional ID of a completed form instance for this line item. For human GRANT_ACCESS requests, include when the requested role, access profile, or entitlement has an associated `formDefinitionId` in its request configuration. An empty `formInstanceId` on a GRANT_ACCESS item is rejected with HTTP 400. Not used for REVOKE_ACCESS.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'formInstanceId'?: string \| null;\n}\n\nexport const AccessRequestItemTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type AccessRequestItemTypeEnum = typeof AccessRequestItemTypeEnum[keyof typeof AccessRequestItemTypeEnum];\n\n/\n Completed form instance associated with an access request item. Omitted when the item has no associated form or no form answers were captured. All listed properties may be present when form answers exist. Optional structural keys (`formElements`, `formConditions`, `formInstanceInputs`) may also be present; their shape follows the form instance payload.\n * @export\n * @interface AccessRequestItemForm\n /\nexport interface AccessRequestItemForm {\n [key: string]: any;\n\n /\n ID of the form definition that was completed for this item.\n * @type {string}\n * @memberof AccessRequestItemForm\n /\n 'formDefinitionId'?: string \| null;\n /\n ID of the completed form instance.\n * @type {string}\n * @memberof AccessRequestItemForm\n /\n 'formInstanceId'?: string \| null;\n /\n Key-value pairs (form field technical name to value) from the completed form instance.\n * @type {{ [key: string]: any; }}\n * @memberof AccessRequestItemForm\n /\n 'formData'?: { [key: string]: any; } \| null;\n /\n Optional form element definitions when present. Shape follows the form instance payload.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof AccessRequestItemForm\n /\n 'formElements'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional conditional display rules when present. Shape follows the form instance payload; do not depend on a fixed condition schema in this API.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof AccessRequestItemForm\n /\n 'formConditions'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional inputs passed into the form instance when present. Copied from the form instance payload as-is.\n * @type {{ [key: string]: any; }}\n * @memberof AccessRequestItemForm\n /\n 'formInstanceInputs'?: { [key: string]: any; } \| null;\n}\n/\n Provides additional details about this access request phase.\n * @export\n * @interface AccessRequestPhases\n /\nexport interface AccessRequestPhases {\n /\n The time that this phase started.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'started'?: string;\n /\n The time that this phase finished.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'finished'?: string \| null;\n /\n The name of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'name'?: string;\n /\n The state of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'state'?: AccessRequestPhasesStateEnum;\n /\n The state of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'result'?: AccessRequestPhasesResultEnum \| null;\n /\n A reference to another object on the RequestedItemStatus that contains more details about the phase. Note that for the Provisioning phase, this will be empty if there are no manual work items.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'phaseReference'?: string \| null;\n}\n\nexport const AccessRequestPhasesStateEnum = {\n Pending: 'PENDING',\n Executing: 'EXECUTING',\n Completed: 'COMPLETED',\n Cancelled: 'CANCELLED',\n NotExecuted: 'NOT_EXECUTED'\n} as const;\n\nexport type AccessRequestPhasesStateEnum = typeof AccessRequestPhasesStateEnum[keyof typeof AccessRequestPhasesStateEnum];\nexport const AccessRequestPhasesResultEnum = {\n Successful: 'SUCCESSFUL',\n Failed: 'FAILED'\n} as const;\n\nexport type AccessRequestPhasesResultEnum = typeof AccessRequestPhasesResultEnum[keyof typeof AccessRequestPhasesResultEnum];\n\n/\n \n * @export\n * @interface AccessRequestResponse\n /\nexport interface AccessRequestResponse {\n /\n A list of new access request tracking data mapped to the values requested.\n * @type {Array<AccessRequestTracking>}\n * @memberof AccessRequestResponse\n /\n 'newRequests'?: Array<AccessRequestTracking>;\n /\n A list of existing access request tracking data mapped to the values requested. This indicates access has already been requested for this item.\n * @type {Array<AccessRequestTracking>}\n * @memberof AccessRequestResponse\n /\n 'existingRequests'?: Array<AccessRequestTracking>;\n}\n/\n \n * @export\n * @interface AccessRequestTracking\n /\nexport interface AccessRequestTracking {\n /\n The identity id in which the access request is for.\n * @type {string}\n * @memberof AccessRequestTracking\n /\n 'requestedFor'?: string;\n /\n The details of the item requested.\n * @type {Array<RequestedItemDetails>}\n * @memberof AccessRequestTracking\n /\n 'requestedItemsDetails'?: Array<RequestedItemDetails>;\n /\n a hash representation of the access requested, useful for longer term tracking client side.\n * @type {number}\n * @memberof AccessRequestTracking\n /\n 'attributesHash'?: number;\n /\n a list of access request identifiers, generally only one will be populated, but high volume requested may result in multiple ids.\n * @type {Array<string>}\n * @memberof AccessRequestTracking\n /\n 'accessRequestIds'?: Array<string>;\n}\n/\n Access request type. Defaults to GRANT_ACCESS. REVOKE_ACCESS type can only have a single Identity ID in the requestedFor field. MODIFY_ACCESS type is used for updating access expiration dates or other access modifications.\n * @export\n * @enum {string}\n /\n\nexport const AccessRequestType = {\n GrantAccess: 'GRANT_ACCESS',\n RevokeAccess: 'REVOKE_ACCESS',\n ModifyAccess: 'MODIFY_ACCESS'\n} as const;\n\nexport type AccessRequestType = typeof AccessRequestType[keyof typeof AccessRequestType];\n\n\n/\n \n * @export\n * @interface AccountInfoRef\n /\nexport interface AccountInfoRef {\n /\n The uuid for the account, available under the \\'objectguid\\' attribute\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'uuid'?: string;\n /\n The \\'distinguishedName\\' attribute for the account\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'nativeIdentity'?: string;\n /\n \n * @type {DtoType}\n * @memberof AccountInfoRef\n /\n 'type'?: DtoType;\n /\n The account id\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'id'?: string;\n /\n The account display name\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'name'?: string;\n}\n\n\n/\n \n * @export\n * @interface AccountItemRef\n /\nexport interface AccountItemRef {\n /\n The uuid for the account on the source, available under the \\'objectguid\\' attribute * Corresponds to the account\\'s unique identifier as returned by accounts-selection or the accounts APIs. * For machine identity GRANT_ACCESS / MODIFY_ACCESS, provide `accountUuid` and/or `nativeIdentity`. Submitted values must match a real machine account for the requested machine identity on the selected source.\n * @type {string}\n * @memberof AccountItemRef\n /\n 'accountUuid'?: string \| null;\n /\n The \\'distinguishedName\\' attribute for the account. * For machine identity GRANT_ACCESS / MODIFY_ACCESS, provide `accountUuid` and/or `nativeIdentity`. Submitted values must match a real machine account for the requested machine identity on the selected source.\n * @type {string}\n * @memberof AccountItemRef\n /\n 'nativeIdentity'?: string;\n}\n/\n Prefetch account selections for an access request before submit. Machine identity accounts-selection must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry and only `ENTITLEMENT` items. Flat `requestedFor` / `requestedItems` must be omitted (do not send an empty array) for machine requests. \n * @export\n * @interface AccountsSelectionRequest\n /\nexport interface AccountsSelectionRequest {\n /\n A list of Identity IDs for whom the Access is requested. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems` (including all machine identity requests).\n * @type {Array<string>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedFor'?: Array<string>;\n /\n \n * @type {AccessRequestType}\n * @memberof AccountsSelectionRequest\n /\n 'requestType'?: AccessRequestType \| null;\n /\n Access items requested. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems`. \n * @type {Array<AccessRequestItem>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedItems'?: Array<AccessRequestItem>;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities.\n * @type {{ [key: string]: string; }}\n * @memberof AccountsSelectionRequest\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n Nested payload pairing each identity with its requested items. * Required for machine identity accounts-selection. Set `identityType: MACHINE` on each entry. * Machine requests support `ENTITLEMENT` items only and do not allow mixed human and machine identities. * When present, `requestedFor` and `requestedItems` must be omitted (do not send an empty array).\n * @type {Array<RequestedForDtoRef>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedForWithRequestedItems'?: Array<RequestedForDtoRef> \| null;\n}\n\n\n/\n \n * @export\n * @interface AccountsSelectionResponse\n /\nexport interface AccountsSelectionResponse {\n /\n A list of available account selections per identity in the request, for all the requested items\n * @type {Array<IdentityAccountSelections>}\n * @memberof AccountsSelectionResponse\n /\n 'identities'?: Array<IdentityAccountSelections>;\n}\n/\n \n * @export\n * @interface ApprovalForwardHistory\n /\nexport interface ApprovalForwardHistory {\n /\n Display name of approver from whom the approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'oldApproverName'?: string;\n /\n Display name of approver to whom the approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'newApproverName'?: string;\n /\n Comment made while forwarding.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'comment'?: string \| null;\n /\n Time at which approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'modified'?: string;\n /\n Display name of forwarder who forwarded the approval.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'forwarderName'?: string \| null;\n /\n \n * @type {ReassignmentType}\n * @memberof ApprovalForwardHistory\n /\n 'reassignmentType'?: ReassignmentType;\n}\n\n\n/\n Configuration for approval reminder and escalation behavior. Important: Modifying this object will override the sp-approval service\\'s reminderConfig and escalationConfig settings. Changes made here take precedence over any configuration set directly in the sp-approval service. \n * @export\n * @interface ApprovalReminderAndEscalationConfig\n /\nexport interface ApprovalReminderAndEscalationConfig {\n /\n Number of days to wait before the first reminder. If no reminders are configured, then this is the number of days to wait before escalation.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'daysUntilEscalation'?: number \| null;\n /\n Number of days to wait between reminder notifications.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'daysBetweenReminders'?: number \| null;\n /\n Maximum number of reminder notifications to send to the reviewer before approval escalation. The maximum allowed value is 20.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'maxReminders'?: number \| null;\n /\n \n * @type {IdentityReferenceWithNameAndEmail}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'fallbackApproverRef'?: IdentityReferenceWithNameAndEmail \| null;\n}\n/\n Describes the individual or group that is responsible for an approval step.\n * @export\n * @enum {string}\n /\n\nexport const ApprovalScheme = {\n AppOwner: 'APP_OWNER',\n SourceOwner: 'SOURCE_OWNER',\n Manager: 'MANAGER',\n RoleOwner: 'ROLE_OWNER',\n AccessProfileOwner: 'ACCESS_PROFILE_OWNER',\n EntitlementOwner: 'ENTITLEMENT_OWNER',\n GovernanceGroup: 'GOVERNANCE_GROUP'\n} as const;\n\nexport type ApprovalScheme = typeof ApprovalScheme[keyof typeof ApprovalScheme];\n\n\n/\n \n * @export\n * @interface ApprovalStatusDto\n /\nexport interface ApprovalStatusDto {\n /\n True if the request for this item was forwarded from one owner to another.\n * @type {boolean}\n * @memberof ApprovalStatusDto\n /\n 'forwarded'?: boolean;\n /\n \n * @type {ApprovalStatusDtoOriginalOwner}\n * @memberof ApprovalStatusDto\n /\n 'originalOwner'?: ApprovalStatusDtoOriginalOwner;\n /\n \n * @type {ApprovalStatusDtoCurrentOwner}\n * @memberof ApprovalStatusDto\n /\n 'currentOwner'?: ApprovalStatusDtoCurrentOwner;\n /\n Time at which item was modified.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'modified'?: string \| null;\n /\n \n * @type {ManualWorkItemState}\n * @memberof ApprovalStatusDto\n /\n 'status'?: ManualWorkItemState;\n /\n \n * @type {ApprovalScheme}\n * @memberof ApprovalStatusDto\n /\n 'scheme'?: ApprovalScheme;\n /\n If the request failed, includes any error messages that were generated.\n * @type {Array<ErrorMessageDto>}\n * @memberof ApprovalStatusDto\n /\n 'errorMessages'?: Array<ErrorMessageDto> \| null;\n /\n Comment, if any, provided by the approver.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'comment'?: string \| null;\n /\n The date the role or access profile or entitlement is no longer assigned to the specified identity.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'removeDate'?: string \| null;\n}\n\n\n/\n \n * @export\n * @interface ApprovalStatusDtoCurrentOwner\n /\nexport interface ApprovalStatusDtoCurrentOwner {\n /\n DTO type of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'type'?: ApprovalStatusDtoCurrentOwnerTypeEnum;\n /\n ID of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'id'?: string;\n /\n Human-readable display name of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'name'?: string;\n}\n\nexport const ApprovalStatusDtoCurrentOwnerTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type ApprovalStatusDtoCurrentOwnerTypeEnum = typeof ApprovalStatusDtoCurrentOwnerTypeEnum[keyof typeof ApprovalStatusDtoCurrentOwnerTypeEnum];\n\n/\n Identity of orginal approval owner.\n * @export\n * @interface ApprovalStatusDtoOriginalOwner\n /\nexport interface ApprovalStatusDtoOriginalOwner {\n /\n DTO type of original approval owner\\'s identity.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'type'?: ApprovalStatusDtoOriginalOwnerTypeEnum;\n /\n ID of original approval owner\\'s identity.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'id'?: string;\n /\n Display name of original approval owner.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'name'?: string;\n}\n\nexport const ApprovalStatusDtoOriginalOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ApprovalStatusDtoOriginalOwnerTypeEnum = typeof ApprovalStatusDtoOriginalOwnerTypeEnum[keyof typeof ApprovalStatusDtoOriginalOwnerTypeEnum];\n\n/\n Request body payload for bulk approve access request endpoint.\n * @export\n * @interface BulkApproveAccessRequest\n /\nexport interface BulkApproveAccessRequest {\n /\n List of approval ids to approve the pending requests\n * @type {Array<string>}\n * @memberof BulkApproveAccessRequest\n /\n 'approvalIds': Array<string>;\n /\n Reason for approving the pending access request.\n * @type {string}\n * @memberof BulkApproveAccessRequest\n /\n 'comment': string;\n}\n/\n Request body payload for bulk cancel access request endpoint.\n * @export\n * @interface BulkCancelAccessRequest\n /\nexport interface BulkCancelAccessRequest {\n /\n List of access requests ids to cancel the pending requests\n * @type {Array<string>}\n * @memberof BulkCancelAccessRequest\n /\n 'accessRequestIds': Array<string>;\n /\n Reason for cancelling the pending access request.\n * @type {string}\n * @memberof BulkCancelAccessRequest\n /\n 'comment': string;\n}\n/\n Request body payload for cancel access request endpoint.\n * @export\n * @interface CancelAccessRequest\n /\nexport interface CancelAccessRequest {\n /\n This refers to the identityRequestId. To successfully cancel an access request, you must provide the identityRequestId.\n * @type {string}\n * @memberof CancelAccessRequest\n /\n 'accountActivityId': string;\n /\n Reason for cancelling the pending access request.\n * @type {string}\n * @memberof CancelAccessRequest\n /\n 'comment': string;\n}\n/\n Provides additional details for a request that has been cancelled.\n * @export\n * @interface CancelledRequestDetails\n /\nexport interface CancelledRequestDetails {\n /\n Comment made by the owner when cancelling the associated request.\n * @type {string}\n * @memberof CancelledRequestDetails\n /\n 'comment'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof CancelledRequestDetails\n /\n 'owner'?: OwnerDto;\n /\n Date comment was added by the owner when cancelling the associated request.\n * @type {string}\n * @memberof CancelledRequestDetails\n /\n 'modified'?: string;\n}\n/\n Request body payload for close access requests endpoint.\n * @export\n * @interface CloseAccessRequest\n /\nexport interface CloseAccessRequest {\n /\n Access Request IDs for the requests to be closed. Accepts 1-500 Identity Request IDs per request.\n * @type {Array<string>}\n * @memberof CloseAccessRequest\n /\n 'accessRequestIds': Array<string>;\n /\n Reason for closing the access request. Displayed under Warnings in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'message'?: string;\n /\n The request\\'s provisioning status. Displayed as Stage in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'executionStatus'?: CloseAccessRequestExecutionStatusEnum;\n /\n The request\\'s overall status. Displayed as Status in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'completionStatus'?: CloseAccessRequestCompletionStatusEnum;\n}\n\nexport const CloseAccessRequestExecutionStatusEnum = {\n Terminated: 'Terminated',\n Completed: 'Completed'\n} as const;\n\nexport type CloseAccessRequestExecutionStatusEnum = typeof CloseAccessRequestExecutionStatusEnum[keyof typeof CloseAccessRequestExecutionStatusEnum];\nexport const CloseAccessRequestCompletionStatusEnum = {\n Success: 'Success',\n Incomplete: 'Incomplete',\n Failure: 'Failure'\n} as const;\n\nexport type CloseAccessRequestCompletionStatusEnum = typeof CloseAccessRequestCompletionStatusEnum[keyof typeof CloseAccessRequestCompletionStatusEnum];\n\n/\n \n * @export\n * @interface CommentDto\n /\nexport interface CommentDto {\n /\n Comment content.\n * @type {string}\n * @memberof CommentDto\n /\n 'comment'?: string \| null;\n /\n Date and time comment was created.\n * @type {string}\n * @memberof CommentDto\n /\n 'created'?: string;\n /\n \n * @type {CommentDtoAuthor}\n * @memberof CommentDto\n /\n 'author'?: CommentDtoAuthor;\n}\n/\n Author of the comment\n * @export\n * @interface CommentDtoAuthor\n /\nexport interface CommentDtoAuthor {\n /\n The type of object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'type'?: CommentDtoAuthorTypeEnum;\n /\n The unique ID of the object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'id'?: string;\n /\n The display name of the object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'name'?: string;\n}\n\nexport const CommentDtoAuthorTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type CommentDtoAuthorTypeEnum = typeof CommentDtoAuthorTypeEnum[keyof typeof CommentDtoAuthorTypeEnum];\n\n/\n An enumeration of the types of DTOs supported within the IdentityNow infrastructure.\n * @export\n * @enum {string}\n /\n\nexport const DtoType = {\n AccountCorrelationConfig: 'ACCOUNT_CORRELATION_CONFIG',\n AccessProfile: 'ACCESS_PROFILE',\n AccessRequestApproval: 'ACCESS_REQUEST_APPROVAL',\n Account: 'ACCOUNT',\n Application: 'APPLICATION',\n Campaign: 'CAMPAIGN',\n CampaignFilter: 'CAMPAIGN_FILTER',\n Certification: 'CERTIFICATION',\n Cluster: 'CLUSTER',\n ConnectorSchema: 'CONNECTOR_SCHEMA',\n Entitlement: 'ENTITLEMENT',\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY',\n IdentityProfile: 'IDENTITY_PROFILE',\n IdentityRequest: 'IDENTITY_REQUEST',\n MachineIdentity: 'MACHINE_IDENTITY',\n LifecycleState: 'LIFECYCLE_STATE',\n PasswordPolicy: 'PASSWORD_POLICY',\n Role: 'ROLE',\n Rule: 'RULE',\n SodPolicy: 'SOD_POLICY',\n Source: 'SOURCE',\n Tag: 'TAG',\n TagCategory: 'TAG_CATEGORY',\n TaskResult: 'TASK_RESULT',\n ReportResult: 'REPORT_RESULT',\n SodViolation: 'SOD_VIOLATION',\n AccountActivity: 'ACCOUNT_ACTIVITY',\n Workgroup: 'WORKGROUP'\n} as const;\n\nexport type DtoType = typeof DtoType[keyof typeof DtoType];\n\n\n/\n \n * @export\n * @interface EntitlementAccessRequestConfig\n /\nexport interface EntitlementAccessRequestConfig {\n /\n Ordered list of approval steps for the access request. Empty when no approval is required.\n * @type {Array<EntitlementApprovalScheme>}\n * @memberof EntitlementAccessRequestConfig\n /\n 'approvalSchemes'?: Array<EntitlementApprovalScheme>;\n /\n If the requester must provide a comment during access request.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'requestCommentRequired'?: boolean;\n /\n If the reviewer must provide a comment when denying the access request.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'denialCommentRequired'?: boolean;\n /\n Is Reauthorization Required\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'reauthorizationRequired'?: boolean;\n /\n If true, then remove date or sunset date is required in access request of the entitlement.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'requireEndDate'?: boolean;\n /\n \n * @type {EntitlementAccessRequestConfigMaxPermittedAccessDuration}\n * @memberof EntitlementAccessRequestConfig\n /\n 'maxPermittedAccessDuration'?: EntitlementAccessRequestConfigMaxPermittedAccessDuration \| null;\n /\n The ID of the form definition used for the access request. If specified, the form is presented to the requester during the access request process.\n * @type {string}\n * @memberof EntitlementAccessRequestConfig\n /\n 'formDefinitionId'?: string \| null;\n}\n/\n The maximum duration for which the access is permitted.\n * @export\n * @interface EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\nexport interface EntitlementAccessRequestConfigMaxPermittedAccessDuration {\n /\n The numeric value of the duration.\n * @type {number}\n * @memberof EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\n 'value'?: number;\n /\n The time unit for the duration.\n * @type {string}\n * @memberof EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\n 'timeUnit'?: EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum;\n}\n\nexport const EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum = {\n Hours: 'HOURS',\n Days: 'DAYS',\n Weeks: 'WEEKS',\n Months: 'MONTHS'\n} as const;\n\nexport type EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum = typeof EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum[keyof typeof EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum];\n\n/\n \n * @export\n * @interface EntitlementApprovalScheme\n /\nexport interface EntitlementApprovalScheme {\n /\n Describes the individual or group that is responsible for an approval step. Values are as follows. ENTITLEMENT_OWNER: Owner of the associated Entitlement SOURCE_OWNER: Owner of the associated Source MANAGER: Manager of the Identity for whom the request is being made GOVERNANCE_GROUP: A Governance Group, the ID of which is specified by the approverId field WORKFLOW: A Workflow, the ID of which is specified by the approverId field, Workflows are exclusive to other types of approvals and License required. \n * @type {string}\n * @memberof EntitlementApprovalScheme\n /\n 'approverType'?: EntitlementApprovalSchemeApproverTypeEnum;\n /\n Id of the specific approver, used only when approverType is GOVERNANCE_GROUP or WORKFLOW\n * @type {string}\n * @memberof EntitlementApprovalScheme\n /\n 'approverId'?: string \| null;\n}\n\nexport const EntitlementApprovalSchemeApproverTypeEnum = {\n EntitlementOwner: 'ENTITLEMENT_OWNER',\n SourceOwner: 'SOURCE_OWNER',\n Manager: 'MANAGER',\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Workflow: 'WORKFLOW'\n} as const;\n\nexport type EntitlementApprovalSchemeApproverTypeEnum = typeof EntitlementApprovalSchemeApproverTypeEnum[keyof typeof EntitlementApprovalSchemeApproverTypeEnum];\n\n/\n \n * @export\n * @interface EntitlementRequestConfig\n /\nexport interface EntitlementRequestConfig {\n /\n \n * @type {EntitlementAccessRequestConfig}\n * @memberof EntitlementRequestConfig\n /\n 'accessRequestConfig'?: EntitlementAccessRequestConfig;\n /\n \n * @type {EntitlementRevocationRequestConfig}\n * @memberof EntitlementRequestConfig\n /\n 'revocationRequestConfig'?: EntitlementRevocationRequestConfig;\n}\n/\n \n * @export\n * @interface EntitlementRequestConfig2\n /\nexport interface EntitlementRequestConfig2 {\n /\n \n * @type {EntitlementAccessRequestConfig}\n * @memberof EntitlementRequestConfig2\n /\n 'accessRequestConfig'?: EntitlementAccessRequestConfig;\n /\n \n * @type {EntitlementRevocationRequestConfig}\n * @memberof EntitlementRequestConfig2\n /\n 'revocationRequestConfig'?: EntitlementRevocationRequestConfig;\n}\n/\n \n * @export\n * @interface EntitlementRevocationRequestConfig\n /\nexport interface EntitlementRevocationRequestConfig {\n /\n Ordered list of approval steps for the access request. Empty when no approval is required.\n * @type {Array<EntitlementApprovalScheme>}\n * @memberof EntitlementRevocationRequestConfig\n /\n 'approvalSchemes'?: Array<EntitlementApprovalScheme>;\n}\n/\n A single JIT entitlement snapshot entry from the provisioning plan.\n * @export\n * @interface EntitlementStateSnapshotJitDetail\n /\nexport interface EntitlementStateSnapshotJitDetail {\n [key: string]: any;\n\n /\n Application id for the entitlement attribute (same as EntitlementStateSnapshot.applicationId).\n * @type {string}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'applicationId'?: string;\n /\n Account attribute name for the entitlement (EntitlementStateSnapshot.attributeName).\n * @type {string}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'attributeName'?: string;\n /\n Entitlement values for that attribute (EntitlementStateSnapshot.attributeValues).\n * @type {Array<string>}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'attributeValues'?: Array<string>;\n}\n/\n \n * @export\n * @interface ErrorMessageDto\n /\nexport interface ErrorMessageDto {\n /\n The locale for the message text, a BCP 47 language tag.\n * @type {string}\n * @memberof ErrorMessageDto\n /\n 'locale'?: string \| null;\n /\n \n * @type {LocaleOrigin}\n * @memberof ErrorMessageDto\n /\n 'localeOrigin'?: LocaleOrigin \| null;\n /\n Actual text of the error message in the indicated locale.\n * @type {string}\n * @memberof ErrorMessageDto\n /\n 'text'?: string;\n}\n\n\n/\n \n * @export\n * @interface ErrorResponseDto\n /\nexport interface ErrorResponseDto {\n /\n Fine-grained error code providing more detail of the error.\n * @type {string}\n * @memberof ErrorResponseDto\n /\n 'detailCode'?: string;\n /\n Unique tracking id for the error.\n * @type {string}\n * @memberof ErrorResponseDto\n /\n 'trackingId'?: string;\n /\n Generic localized reason for error\n * @type {Array<ErrorMessageDto>}\n * @memberof ErrorResponseDto\n /\n 'messages'?: Array<ErrorMessageDto>;\n /\n Plain-text descriptive reasons to provide additional detail to the text provided in the messages field\n * @type {Array<ErrorMessageDto>}\n * @memberof ErrorResponseDto\n /\n 'causes'?: Array<ErrorMessageDto>;\n}\n/\n \n * @export\n * @interface GetAccessRequestConfigV1401Response\n /\nexport interface GetAccessRequestConfigV1401Response {\n /\n A message describing the error\n * @type {any}\n * @memberof GetAccessRequestConfigV1401Response\n /\n 'error'?: any;\n}\n/\n \n * @export\n * @interface GetAccessRequestConfigV1429Response\n /\nexport interface GetAccessRequestConfigV1429Response {\n /\n A message describing the error\n * @type {any}\n * @memberof GetAccessRequestConfigV1429Response\n /\n 'message'?: any;\n}\n/\n \n * @export\n * @interface IdentityAccountSelections\n /\nexport interface IdentityAccountSelections {\n /\n Available account selections for the identity, per requested item\n * @type {Array<RequestedItemAccountSelections>}\n * @memberof IdentityAccountSelections\n /\n 'requestedItems'?: Array<RequestedItemAccountSelections>;\n /\n A boolean indicating whether any account selections will be required for the user to raise an access request\n * @type {boolean}\n * @memberof IdentityAccountSelections\n /\n 'accountsSelectionRequired'?: boolean;\n /\n \n * @type {DtoType}\n * @memberof IdentityAccountSelections\n /\n 'type'?: DtoType;\n /\n The identity id for the requested-for identity. * `IDENTITY`: the human identity id. * `MACHINE_IDENTITY`: the machine identity id (not the correlated human identity). \n * @type {string}\n * @memberof IdentityAccountSelections\n /\n 'id'?: string;\n /\n The name of the identity\n * @type {string}\n * @memberof IdentityAccountSelections\n /\n 'name'?: string;\n}\n\n\n/\n \n * @export\n * @interface IdentityEntitlementDetails\n /\nexport interface IdentityEntitlementDetails {\n /\n Id of Identity\n * @type {string}\n * @memberof IdentityEntitlementDetails\n /\n 'identityId'?: string;\n /\n \n * @type {IdentityEntitlementDetailsEntitlementDto}\n * @memberof IdentityEntitlementDetails\n /\n 'entitlement'?: IdentityEntitlementDetailsEntitlementDto;\n /\n Id of Source\n * @type {string}\n * @memberof IdentityEntitlementDetails\n /\n 'sourceId'?: string;\n /\n A list of account targets on the identity provisioned with the requested entitlement.\n * @type {Array<IdentityEntitlementDetailsAccountTarget>}\n * @memberof IdentityEntitlementDetails\n /\n 'accountTargets'?: Array<IdentityEntitlementDetailsAccountTarget>;\n}\n/\n \n * @export\n * @interface IdentityEntitlementDetailsAccountTarget\n /\nexport interface IdentityEntitlementDetailsAccountTarget {\n /\n The id of account\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountId'?: string;\n /\n The name of account\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountName'?: string;\n /\n The UUID representation of the account if available\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountUUID'?: string \| null;\n /\n The id of Source\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'sourceId'?: string;\n /\n The name of Source\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'sourceName'?: string;\n /\n The removal date scheduled for the entitlement on the Identity\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'removeDate'?: string \| null;\n /\n The assignmentId of the entitlement on the Identity\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'assignmentId'?: string \| null;\n /\n If the entitlement can be revoked\n * @type {boolean}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'revocable'?: boolean;\n}\n/\n \n * @export\n * @interface IdentityEntitlementDetailsEntitlementDto\n /\nexport interface IdentityEntitlementDetailsEntitlementDto {\n /\n The entitlement id\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'id'?: string;\n /\n The entitlement name\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'name'?: string;\n /\n Time when the entitlement was last modified\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'created'?: string;\n /\n Time when the entitlement was last modified\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'modified'?: string;\n /\n The description of the entitlement\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'description'?: string \| null;\n /\n The type of the object, will always be \\\"ENTITLEMENT\\\"\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'type'?: string;\n /\n The source ID\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'sourceId'?: string;\n /\n The source name\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'sourceName'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'owner'?: OwnerDto;\n /\n The value of the entitlement\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'value'?: string;\n /\n a list of properties informing the viewer about the entitlement\n * @type {Array<string>}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'flags'?: Array<string>;\n}\n/\n \n * @export\n * @interface IdentityReferenceWithNameAndEmail\n /\nexport interface IdentityReferenceWithNameAndEmail {\n /\n The type can only be IDENTITY. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'type'?: string;\n /\n Identity ID.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'id'?: string;\n /\n Identity\\'s human-readable display name. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'name'?: string;\n /\n Identity\\'s email address. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'email'?: string \| null;\n}\n/\n An indicator of how the locale was selected. DEFAULT means the locale is the system default. REQUEST means the locale was selected from the request context (i.e., best match based on the Accept-Language header). Additional values may be added in the future without notice.\n * @export\n * @enum {string}\n /\n\nexport const LocaleOrigin = {\n Default: 'DEFAULT',\n Request: 'REQUEST'\n} as const;\n\nexport type LocaleOrigin = typeof LocaleOrigin[keyof typeof LocaleOrigin];\n\n\n/\n \n * @export\n * @interface ManualWorkItemDetails\n /\nexport interface ManualWorkItemDetails {\n /\n True if the request for this item was forwarded from one owner to another.\n * @type {boolean}\n * @memberof ManualWorkItemDetails\n /\n 'forwarded'?: boolean;\n /\n \n * @type {ManualWorkItemDetailsOriginalOwner}\n * @memberof ManualWorkItemDetails\n /\n 'originalOwner'?: ManualWorkItemDetailsOriginalOwner \| null;\n /\n \n * @type {ManualWorkItemDetailsCurrentOwner}\n * @memberof ManualWorkItemDetails\n /\n 'currentOwner'?: ManualWorkItemDetailsCurrentOwner \| null;\n /\n Time at which item was modified.\n * @type {string}\n * @memberof ManualWorkItemDetails\n /\n 'modified'?: string;\n /\n \n * @type {ManualWorkItemState}\n * @memberof ManualWorkItemDetails\n /\n 'status'?: ManualWorkItemState;\n /\n The history of approval forward action.\n * @type {Array<ApprovalForwardHistory>}\n * @memberof ManualWorkItemDetails\n /\n 'forwardHistory'?: Array<ApprovalForwardHistory> \| null;\n}\n\n\n/\n Identity of current work item owner.\n * @export\n * @interface ManualWorkItemDetailsCurrentOwner\n /\nexport interface ManualWorkItemDetailsCurrentOwner {\n /\n DTO type of current work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'type'?: ManualWorkItemDetailsCurrentOwnerTypeEnum;\n /\n ID of current work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'id'?: string;\n /\n Display name of current work item owner.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'name'?: string;\n}\n\nexport const ManualWorkItemDetailsCurrentOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ManualWorkItemDetailsCurrentOwnerTypeEnum = typeof ManualWorkItemDetailsCurrentOwnerTypeEnum[keyof typeof ManualWorkItemDetailsCurrentOwnerTypeEnum];\n\n/\n Identity of original work item owner, if the work item has been forwarded.\n * @export\n * @interface ManualWorkItemDetailsOriginalOwner\n /\nexport interface ManualWorkItemDetailsOriginalOwner {\n /\n DTO type of original work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'type'?: ManualWorkItemDetailsOriginalOwnerTypeEnum;\n /\n ID of original work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'id'?: string;\n /\n Display name of original work item owner.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'name'?: string;\n}\n\nexport const ManualWorkItemDetailsOriginalOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ManualWorkItemDetailsOriginalOwnerTypeEnum = typeof ManualWorkItemDetailsOriginalOwnerTypeEnum[keyof typeof ManualWorkItemDetailsOriginalOwnerTypeEnum];\n\n/\n Indicates the state of the request processing for this item: * PENDING: The request for this item is awaiting processing. * APPROVED: The request for this item has been approved. * REJECTED: The request for this item was rejected. * EXPIRED: The request for this item expired with no action taken. * CANCELLED: The request for this item was cancelled with no user action. * ARCHIVED: The request for this item has been archived after completion.\n * @export\n * @enum {string}\n /\n\nexport const ManualWorkItemState = {\n Pending: 'PENDING',\n Approved: 'APPROVED',\n Rejected: 'REJECTED',\n Expired: 'EXPIRED',\n Cancelled: 'CANCELLED',\n Archived: 'ARCHIVED'\n} as const;\n\nexport type ManualWorkItemState = typeof ManualWorkItemState[keyof typeof ManualWorkItemState];\n\n\n/\n Owner\\'s identity.\n * @export\n * @interface OwnerDto\n /\nexport interface OwnerDto {\n /\n Owner\\'s DTO type.\n * @type {string}\n * @memberof OwnerDto\n /\n 'type'?: OwnerDtoTypeEnum;\n /\n Owner\\'s identity ID.\n * @type {string}\n * @memberof OwnerDto\n /\n 'id'?: string;\n /\n Owner\\'s name.\n * @type {string}\n * @memberof OwnerDto\n /\n 'name'?: string;\n}\n\nexport const OwnerDtoTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type OwnerDtoTypeEnum = typeof OwnerDtoTypeEnum[keyof typeof OwnerDtoTypeEnum];\n\n/\n Provides additional details about the pre-approval trigger for this request.\n * @export\n * @interface PreApprovalTriggerDetails\n /\nexport interface PreApprovalTriggerDetails {\n /\n Comment left for the pre-approval decision\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'comment'?: string;\n /\n The reviewer of the pre-approval decision\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'reviewer'?: string;\n /\n The decision of the pre-approval trigger\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'decision'?: PreApprovalTriggerDetailsDecisionEnum;\n}\n\nexport const PreApprovalTriggerDetailsDecisionEnum = {\n Approved: 'APPROVED',\n Rejected: 'REJECTED'\n} as const;\n\nexport type PreApprovalTriggerDetailsDecisionEnum = typeof PreApprovalTriggerDetailsDecisionEnum[keyof typeof PreApprovalTriggerDetailsDecisionEnum];\n\n/\n Provides additional details about provisioning for this request.\n * @export\n * @interface ProvisioningDetails\n /\nexport interface ProvisioningDetails {\n /\n Ordered CSV of sub phase references to objects that contain more information about provisioning. For example, this can contain \\\"manualWorkItemDetails\\\" which indicate that there is further information in that object for this phase.\n * @type {string}\n * @memberof ProvisioningDetails\n /\n 'orderedSubPhaseReferences'?: string;\n}\n/\n The approval reassignment type. * MANUAL_REASSIGNMENT: An approval with this reassignment type has been specifically reassigned by the approval task\\'s owner, from their queue to someone else\\'s. * AUTOMATIC_REASSIGNMENT: An approval with this reassignment type has been automatically reassigned from another approver\\'s queue, according to that approver\\'s reassignment configuration. The approver\\'s reassignment configuration may be set up to automatically reassign approval tasks for a defined (or possibly open-ended) period of time. * AUTO_ESCALATION: An approval with this reassignment type has been automatically reassigned from another approver\\'s queue, according to the request\\'s escalation configuration. For more information about escalation configuration, refer to [Setting Global Reminders and Escalation Policies](https://documentation.sailpoint.com/saas/help/requests/config_emails.html). * SELF_REVIEW_DELEGATION: An approval with this reassignment type has been automatically reassigned by the system to prevent self-review. This helps prevent situations like a requester being tasked with approving their own request. For more information about preventing self-review, refer to [Self-review Prevention](https://documentation.sailpoint.com/saas/help/users/work_reassignment.html#self-review-prevention) and [Preventing Self-approval](https://documentation.sailpoint.com/saas/help/requests/config_ap_roles.html#preventing-self-approval).\n * @export\n * @enum {string}\n /\n\nexport const ReassignmentType = {\n ManualReassignment: 'MANUAL_REASSIGNMENT',\n AutomaticReassignment: 'AUTOMATIC_REASSIGNMENT',\n AutoEscalation: 'AUTO_ESCALATION',\n SelfReviewDelegation: 'SELF_REVIEW_DELEGATION'\n} as const;\n\nexport type ReassignmentType = typeof ReassignmentType[keyof typeof ReassignmentType];\n\n\n/\n \n * @export\n * @interface RequestOnBehalfOfConfig\n /\nexport interface RequestOnBehalfOfConfig {\n /\n If this is true, anyone can request access for anyone.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfAnyoneByAnyone'?: boolean;\n /\n If this is true, a manager can request access for his or her direct reports.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfEmployeeByManager'?: boolean;\n /\n If this is true, anyone can request access on behalf of machine identities. Machine access request authorization is evaluated as follows: 1. If this flag is true, any requester is allowed. 2. Else if `allowRequestForMachineByOwner` is true, the requester must be an admin or a primary/secondary owner of every requested machine identity. 3. Else admins are still allowed; non-admins receive 403. \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfForMachineIdentity'?: boolean;\n /\n When `allowRequestOnBehalfOfForMachineIdentity` is false and this flag is true, only admins and primary/secondary owners of the requested machine identities may submit machine access requests. Defaults to false (opt-in). \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestForMachineByOwner'?: boolean;\n}\n/\n \n * @export\n * @interface RequestOnBehalfOfConfig2\n /\nexport interface RequestOnBehalfOfConfig2 {\n /\n If this is true, anyone can request access for anyone.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfAnyoneByAnyone'?: boolean;\n /\n If this is true, a manager can request access for his or her direct reports.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfEmployeeByManager'?: boolean;\n /\n If this is true, anyone can request access on behalf of machine identities. Machine access request authorization is evaluated as follows: 1. If this flag is true, any requester is allowed. 2. Else if `allowRequestForMachineByOwner` is true, the requester must be an admin or a primary/secondary owner of every requested machine identity. 3. Else admins are still allowed; non-admins receive 403. \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfForMachineIdentity'?: boolean;\n /\n When `allowRequestOnBehalfOfForMachineIdentity` is false and this flag is true, only admins and primary/secondary owners of the requested machine identities may submit machine access requests. Defaults to false (opt-in). \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestForMachineByOwner'?: boolean;\n}\n/\n \n * @export\n * @interface RequestedAccountRef\n /\nexport interface RequestedAccountRef {\n /\n Display name of the account for the user\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'name'?: string;\n /\n \n * @type {DtoType}\n * @memberof RequestedAccountRef\n /\n 'type'?: DtoType;\n /\n The uuid for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'accountUuid'?: string \| null;\n /\n The native identity for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'accountId'?: string \| null;\n /\n Display name of the source for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'sourceName'?: string;\n}\n\n\n/\n \n * @export\n * @interface RequestedForDtoRef\n /\nexport interface RequestedForDtoRef {\n /\n The identity id the access is requested for. * `HUMAN` (default): the human identity id. * `MACHINE`: the machine identity id (hyphenated RFC-4122 UUID, not the correlated human identity). \n * @type {string}\n * @memberof RequestedForDtoRef\n /\n 'identityId': string;\n /\n Type of identity the access is requested for. * `HUMAN` (default) - standard human identity access request. * `MACHINE` - machine identity access request. When `MACHINE`, all entries in the request must also be `MACHINE` (mixed human and machine identities in one request are not supported), and only `ENTITLEMENT` items are allowed. \n * @type {string}\n * @memberof RequestedForDtoRef\n /\n 'identityType'?: RequestedForDtoRefIdentityTypeEnum;\n /\n the details for the access items that are requested for the identity\n * @type {Array<RequestedItemDtoRef>}\n * @memberof RequestedForDtoRef\n /\n 'requestedItems': Array<RequestedItemDtoRef>;\n}\n\nexport const RequestedForDtoRefIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type RequestedForDtoRefIdentityTypeEnum = typeof RequestedForDtoRefIdentityTypeEnum[keyof typeof RequestedForDtoRefIdentityTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemAccountSelections\n /\nexport interface RequestedItemAccountSelections {\n /\n The description for this requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'description'?: string;\n /\n This field indicates if account selections are not allowed for this requested item. * If true, this field indicates that account selections will not be available for this item and identity combination. In this case, no account selections should be provided in the access request for this item and identity combination, irrespective of whether the identity has single or multiple accounts on a source. * An example is where a user is requesting an access profile that is already assigned to one of their accounts. * For machine identities, this can be true with reason `NO_ACCOUNT_ON_SOURCE` when the machine has no account on a requested source. Empty `sources[].accounts` on the accounts-selection response is valid in that blocked case; submitting empty accounts on create is not valid. \n * @type {boolean}\n * @memberof RequestedItemAccountSelections\n /\n 'accountsSelectionBlocked'?: boolean;\n /\n If account selections are not allowed for an item, this field will denote the reason. * `ACCESS_PROFILE_ALREADY_ASSIGNED_TO_AN_ACCOUNT` - access profile already assigned on an account. * `NO_ACCOUNT_ON_SOURCE` - no account found on at least one requested source (only for machine identities). \n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'accountsSelectionBlockedReason'?: string \| null;\n /\n The type of the item being requested.\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'type'?: RequestedItemAccountSelectionsTypeEnum;\n /\n The id of the requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'id'?: string;\n /\n The name of the requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'name'?: string;\n /\n The details for the sources and accounts for the requested item and identity combination\n * @type {Array<SourceAccountSelections>}\n * @memberof RequestedItemAccountSelections\n /\n 'sources'?: Array<SourceAccountSelections>;\n}\n\nexport const RequestedItemAccountSelectionsTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemAccountSelectionsTypeEnum = typeof RequestedItemAccountSelectionsTypeEnum[keyof typeof RequestedItemAccountSelectionsTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemDetails\n /\nexport interface RequestedItemDetails {\n /\n The type of access item requested.\n * @type {string}\n * @memberof RequestedItemDetails\n /\n 'type'?: RequestedItemDetailsTypeEnum;\n /\n The id of the access item requested.\n * @type {string}\n * @memberof RequestedItemDetails\n /\n 'id'?: string;\n}\n\nexport const RequestedItemDetailsTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Entitlement: 'ENTITLEMENT',\n Role: 'ROLE'\n} as const;\n\nexport type RequestedItemDetailsTypeEnum = typeof RequestedItemDetailsTypeEnum[keyof typeof RequestedItemDetailsTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemDtoRef\n /\nexport interface RequestedItemDtoRef {\n /\n The type of the item being requested. * Machine identity access requests support `ENTITLEMENT` only. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'type': RequestedItemDtoRefTypeEnum;\n /\n ID of Role, Access Profile or Entitlement being requested.\n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'id': string;\n /\n Comment provided by requester. * Comment is required when the request is of type Revoke Access. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'comment'?: string;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities and /access-request-status.\n * @type {{ [key: string]: string; }}\n * @memberof RequestedItemDtoRef\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. * For machine identity MODIFY_ACCESS, each requested item must include `startDate` and/or `removeDate`. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'startDate'?: string;\n /\n The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. * For machine identity MODIFY_ACCESS, each requested item must include `startDate` and/or `removeDate`. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'removeDate'?: string;\n /\n The accounts where the access item will be provisioned to. * Includes selections performed by the user in the event of multiple accounts existing on the same source. * Also includes details for sources where user only has one account. * For machine identity GRANT_ACCESS and MODIFY_ACCESS: required. Provide exactly one source entry and exactly one account on that source. `accountUuid` and/or `nativeIdentity` must match a real machine account for the requested machine identity on that source. Prefer values returned by the accounts-selection API. * For machine identity REVOKE_ACCESS: not supported. Use `nativeIdentity` on the item instead. \n * @type {Array<SourceItemRef>}\n * @memberof RequestedItemDtoRef\n /\n 'accountSelection'?: Array<SourceItemRef> \| null;\n /\n The unique identifier for an account on the identity, designated as the account ID attribute in the source\\'s account schema. * For machine identity REVOKE_ACCESS: required per entitlement item (or auto-resolved when the machine has exactly one account on the entitlement source). Must match a machine account on that source. Do not send `accountSelection` on machine revoke. Human REVOKE_ACCESS cannot use this nested item schema; use flat `requestedItems` instead. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'nativeIdentity'?: string \| null;\n /\n Optional ID of a completed form instance for this line item. * For human GRANT_ACCESS: include when the requested role, access profile, or entitlement has an associated `formDefinitionId` in its request configuration. An empty `formInstanceId` on a GRANT_ACCESS item is rejected with HTTP 400. * Not supported for machine identity access requests.\n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'formInstanceId'?: string \| null;\n}\n\nexport const RequestedItemDtoRefTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemDtoRefTypeEnum = typeof RequestedItemDtoRefTypeEnum[keyof typeof RequestedItemDtoRefTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatus\n /\nexport interface RequestedItemStatus {\n /\n The ID of the access request. As of 2025, this is a new property. Older access requests might not have an ID.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'id'?: string \| null;\n /\n Human-readable display name of the item being requested.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'name'?: string \| null;\n /\n Type of requested object.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'type'?: RequestedItemStatusTypeEnum \| null;\n /\n \n * @type {RequestedItemStatusCancelledRequestDetails}\n * @memberof RequestedItemStatus\n /\n 'cancelledRequestDetails'?: RequestedItemStatusCancelledRequestDetails;\n /\n List of list of localized error messages, if any, encountered during the approval/provisioning process.\n * @type {Array<Array<ErrorMessageDto>>}\n * @memberof RequestedItemStatus\n /\n 'errorMessages'?: Array<Array<ErrorMessageDto>> \| null;\n /\n \n * @type {RequestedItemStatusRequestState}\n * @memberof RequestedItemStatus\n /\n 'state'?: RequestedItemStatusRequestState;\n /\n Approval details for each item.\n * @type {Array<ApprovalStatusDto>}\n * @memberof RequestedItemStatus\n /\n 'approvalDetails'?: Array<ApprovalStatusDto>;\n /\n List of approval IDs associated with the request.\n * @type {Array<string>}\n * @memberof RequestedItemStatus\n /\n 'approvalIds'?: Array<string> \| null;\n /\n Manual work items created for provisioning the item.\n * @type {Array<ManualWorkItemDetails>}\n * @memberof RequestedItemStatus\n /\n 'manualWorkItemDetails'?: Array<ManualWorkItemDetails> \| null;\n /\n Id of associated account activity item.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'accountActivityItemId'?: string;\n /\n \n * @type {AccessRequestType}\n * @memberof RequestedItemStatus\n /\n 'requestType'?: AccessRequestType \| null;\n /\n When the request was last modified.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'modified'?: string \| null;\n /\n When the request was created.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'created'?: string;\n /\n \n * @type {AccessItemRequester}\n * @memberof RequestedItemStatus\n /\n 'requester'?: AccessItemRequester;\n /\n \n * @type {RequestedItemStatusRequestedFor}\n * @memberof RequestedItemStatus\n /\n 'requestedFor'?: RequestedItemStatusRequestedFor;\n /\n Type of identity the access was requested for. Legacy requests without a stored identity type are returned as `HUMAN`. \n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'identityType'?: RequestedItemStatusIdentityTypeEnum;\n /\n \n * @type {RequestedItemStatusRequesterComment}\n * @memberof RequestedItemStatus\n /\n 'requesterComment'?: RequestedItemStatusRequesterComment;\n /\n \n * @type {RequestedItemStatusSodViolationContext}\n * @memberof RequestedItemStatus\n /\n 'sodViolationContext'?: RequestedItemStatusSodViolationContext;\n /\n \n * @type {RequestedItemStatusProvisioningDetails}\n * @memberof RequestedItemStatus\n /\n 'provisioningDetails'?: RequestedItemStatusProvisioningDetails;\n /\n \n * @type {RequestedItemStatusPreApprovalTriggerDetails}\n * @memberof RequestedItemStatus\n /\n 'preApprovalTriggerDetails'?: RequestedItemStatusPreApprovalTriggerDetails;\n /\n A list of Phases that the Access Request has gone through in order, to help determine the status of the request.\n * @type {Array<AccessRequestPhases>}\n * @memberof RequestedItemStatus\n /\n 'accessRequestPhases'?: Array<AccessRequestPhases> \| null;\n /\n Description associated to the requested object.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'description'?: string \| null;\n /\n When the role access is scheduled for provisioning.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'startDate'?: string \| null;\n /\n When the role access is scheduled for removal.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'removeDate'?: string \| null;\n /\n True if the request can be canceled.\n * @type {boolean}\n * @memberof RequestedItemStatus\n /\n 'cancelable'?: boolean;\n /\n This is the account activity id.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'accessRequestId'?: string;\n /\n Arbitrary key-value pairs, if any were included in the corresponding access request\n * @type {{ [key: string]: string; }}\n * @memberof RequestedItemStatus\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n The accounts selected for the access to be provisioned on, in case the requested-for identity has multiple accounts on one or more sources.\n * @type {Array<RequestedAccountRef>}\n * @memberof RequestedItemStatus\n /\n 'requestedAccounts'?: Array<RequestedAccountRef> \| null;\n /\n The privilege level of the requested access item, if applicable.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'privilegeLevel'?: string \| null;\n /\n JIT (Just-In-Time) details for the requested access item, if applicable.\n * @type {Array<EntitlementStateSnapshotJitDetail>}\n * @memberof RequestedItemStatus\n /\n 'jitDetails'?: Array<EntitlementStateSnapshotJitDetail> \| null;\n /\n \n * @type {RequestedItemStatusForm}\n * @memberof RequestedItemStatus\n /\n 'form'?: RequestedItemStatusForm;\n}\n\nexport const RequestedItemStatusTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemStatusTypeEnum = typeof RequestedItemStatusTypeEnum[keyof typeof RequestedItemStatusTypeEnum];\nexport const RequestedItemStatusIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type RequestedItemStatusIdentityTypeEnum = typeof RequestedItemStatusIdentityTypeEnum[keyof typeof RequestedItemStatusIdentityTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusCancelledRequestDetails\n /\nexport interface RequestedItemStatusCancelledRequestDetails {\n /\n Comment made by the owner when cancelling the associated request.\n * @type {string}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'comment'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'owner'?: OwnerDto;\n /\n Date comment was added by the owner when cancelling the associated request.\n * @type {string}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'modified'?: string;\n}\n/\n \n * @export\n * @interface RequestedItemStatusForm\n /\nexport interface RequestedItemStatusForm {\n /\n ID of the form definition that was completed for this item.\n * @type {string}\n * @memberof RequestedItemStatusForm\n /\n 'formDefinitionId'?: string \| null;\n /\n ID of the completed form instance.\n * @type {string}\n * @memberof RequestedItemStatusForm\n /\n 'formInstanceId'?: string \| null;\n /\n Key-value pairs (form field technical name to value) from the completed form instance.\n * @type {{ [key: string]: any; }}\n * @memberof RequestedItemStatusForm\n /\n 'formData'?: { [key: string]: any; } \| null;\n /\n Optional form element definitions when present. Shape follows the form instance payload.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof RequestedItemStatusForm\n /\n 'formElements'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional conditional display rules when present. Shape follows the form instance payload; do not depend on a fixed condition schema in this API.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof RequestedItemStatusForm\n /\n 'formConditions'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional inputs passed into the form instance when present. Copied from the form instance payload as-is.\n * @type {{ [key: string]: any; }}\n * @memberof RequestedItemStatusForm\n /\n 'formInstanceInputs'?: { [key: string]: any; } \| null;\n}\n/\n \n * @export\n * @interface RequestedItemStatusPreApprovalTriggerDetails\n /\nexport interface RequestedItemStatusPreApprovalTriggerDetails {\n /\n Comment left for the pre-approval decision\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'comment'?: string;\n /\n The reviewer of the pre-approval decision\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'reviewer'?: string;\n /\n The decision of the pre-approval trigger\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'decision'?: RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum;\n}\n\nexport const RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum = {\n Approved: 'APPROVED',\n Rejected: 'REJECTED'\n} as const;\n\nexport type RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum = typeof RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum[keyof typeof RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusProvisioningDetails\n /\nexport interface RequestedItemStatusProvisioningDetails {\n /\n Ordered CSV of sub phase references to objects that contain more information about provisioning. For example, this can contain \\\"manualWorkItemDetails\\\" which indicate that there is further information in that object for this phase.\n * @type {string}\n * @memberof RequestedItemStatusProvisioningDetails\n /\n 'orderedSubPhaseReferences'?: string;\n}\n/\n Indicates the state of an access request: * EXECUTING: The request is executing, which indicates the system is doing some processing. * REQUEST_COMPLETED: Indicates the request has been completed. * CANCELLED: The request was cancelled with no user input. * TERMINATED: The request has been terminated before it was able to complete. * PROVISIONING_VERIFICATION_PENDING: The request has finished any approval steps and provisioning is waiting to be verified. * REJECTED: The request was rejected. * PROVISIONING_FAILED: The request has failed to complete. * NOT_ALL_ITEMS_PROVISIONED: One or more of the requested items failed to complete, but there were one or more successes. * ERROR: An error occurred during request processing.\n * @export\n * @enum {string}\n /\n\nexport const RequestedItemStatusRequestState = {\n Executing: 'EXECUTING',\n RequestCompleted: 'REQUEST_COMPLETED',\n Cancelled: 'CANCELLED',\n Terminated: 'TERMINATED',\n ProvisioningVerificationPending: 'PROVISIONING_VERIFICATION_PENDING',\n Rejected: 'REJECTED',\n ProvisioningFailed: 'PROVISIONING_FAILED',\n NotAllItemsProvisioned: 'NOT_ALL_ITEMS_PROVISIONED',\n Error: 'ERROR'\n} as const;\n\nexport type RequestedItemStatusRequestState = typeof RequestedItemStatusRequestState[keyof typeof RequestedItemStatusRequestState];\n\n\n/\n Identity access was requested for. For machine identity requests, `type` is `MACHINE_IDENTITY` and `id` is the machine identity id.\n * @export\n * @interface RequestedItemStatusRequestedFor\n /\nexport interface RequestedItemStatusRequestedFor {\n /\n Type of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'type'?: RequestedItemStatusRequestedForTypeEnum;\n /\n ID of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'id'?: string;\n /\n Human-readable display name of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'name'?: string;\n}\n\nexport const RequestedItemStatusRequestedForTypeEnum = {\n Identity: 'IDENTITY',\n MachineIdentity: 'MACHINE_IDENTITY'\n} as const;\n\nexport type RequestedItemStatusRequestedForTypeEnum = typeof RequestedItemStatusRequestedForTypeEnum[keyof typeof RequestedItemStatusRequestedForTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusRequesterComment\n /\nexport interface RequestedItemStatusRequesterComment {\n /\n Comment content.\n * @type {string}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'comment'?: string \| null;\n /\n Date and time comment was created.\n * @type {string}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'created'?: string;\n /\n \n * @type {CommentDtoAuthor}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'author'?: CommentDtoAuthor;\n}\n/\n \n * @export\n * @interface RequestedItemStatusSodViolationContext\n /\nexport interface RequestedItemStatusSodViolationContext {\n /\n The status of SOD violation check\n * @type {string}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'state'?: RequestedItemStatusSodViolationContextStateEnum \| null;\n /\n The id of the Violation check event\n * @type {string}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'uuid'?: string \| null;\n /\n \n * @type {SodViolationCheckResult}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'violationCheckResult'?: SodViolationCheckResult;\n}\n\nexport const RequestedItemStatusSodViolationContextStateEnum = {\n Success: 'SUCCESS',\n Error: 'ERROR'\n} as const;\n\nexport type RequestedItemStatusSodViolationContextStateEnum = typeof RequestedItemStatusSodViolationContextStateEnum[keyof typeof RequestedItemStatusSodViolationContextStateEnum];\n\n/\n Details of the Entitlement criteria\n * @export\n * @interface SodExemptCriteria\n /\nexport interface SodExemptCriteria {\n /\n If the entitlement already belonged to the user or not.\n * @type {boolean}\n * @memberof SodExemptCriteria\n /\n 'existing'?: boolean;\n /\n \n * @type {DtoType}\n * @memberof SodExemptCriteria\n /\n 'type'?: DtoType;\n /\n Entitlement ID\n * @type {string}\n * @memberof SodExemptCriteria\n /\n 'id'?: string;\n /\n Entitlement name\n * @type {string}\n * @memberof SodExemptCriteria\n /\n 'name'?: string;\n}\n\n\n/\n SOD policy.\n * @export\n * @interface SodPolicyDto\n /\nexport interface SodPolicyDto {\n /\n SOD policy DTO type.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'type'?: SodPolicyDtoTypeEnum;\n /\n SOD policy ID.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'id'?: string;\n /\n SOD policy display name.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'name'?: string;\n}\n\nexport const SodPolicyDtoTypeEnum = {\n SodPolicy: 'SOD_POLICY'\n} as const;\n\nexport type SodPolicyDtoTypeEnum = typeof SodPolicyDtoTypeEnum[keyof typeof SodPolicyDtoTypeEnum];\n\n/\n The inner object representing the completed SOD Violation check\n * @export\n * @interface SodViolationCheckResult\n /\nexport interface SodViolationCheckResult {\n /\n \n * @type {ErrorMessageDto}\n * @memberof SodViolationCheckResult\n /\n 'message'?: ErrorMessageDto;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on completion of the violation check.\n * @type {{ [key: string]: string; }}\n * @memberof SodViolationCheckResult\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n \n * @type {Array<SodViolationContext>}\n * @memberof SodViolationCheckResult\n /\n 'violationContexts'?: Array<SodViolationContext> \| null;\n /\n A list of the SOD policies that were violated.\n * @type {Array<SodPolicyDto>}\n * @memberof SodViolationCheckResult\n /\n 'violatedPolicies'?: Array<SodPolicyDto> \| null;\n}\n/\n The contextual information of the violated criteria\n * @export\n * @interface SodViolationContext\n /\nexport interface SodViolationContext {\n /\n \n * @type {SodPolicyDto}\n * @memberof SodViolationContext\n /\n 'policy'?: SodPolicyDto;\n /\n \n * @type {SodViolationContextConflictingAccessCriteria}\n * @memberof SodViolationContext\n /\n 'conflictingAccessCriteria'?: SodViolationContextConflictingAccessCriteria;\n}\n/\n An object referencing a completed SOD violation check\n * @export\n * @interface SodViolationContextCheckCompleted\n /\nexport interface SodViolationContextCheckCompleted {\n /\n The status of SOD violation check\n * @type {string}\n * @memberof SodViolationContextCheckCompleted\n /\n 'state'?: SodViolationContextCheckCompletedStateEnum \| null;\n /\n The id of the Violation check event\n * @type {string}\n * @memberof SodViolationContextCheckCompleted\n /\n 'uuid'?: string \| null;\n /\n \n * @type {SodViolationCheckResult}\n * @memberof SodViolationContextCheckCompleted\n /\n 'violationCheckResult'?: SodViolationCheckResult;\n}\n\nexport const SodViolationContextCheckCompletedStateEnum = {\n Success: 'SUCCESS',\n Error: 'ERROR'\n} as const;\n\nexport type SodViolationContextCheckCompletedStateEnum = typeof SodViolationContextCheckCompletedStateEnum[keyof typeof SodViolationContextCheckCompletedStateEnum];\n\n/\n The object which contains the left and right hand side of the entitlements that got violated according to the policy.\n * @export\n * @interface SodViolationContextConflictingAccessCriteria\n /\nexport interface SodViolationContextConflictingAccessCriteria {\n /\n \n * @type {SodViolationContextConflictingAccessCriteriaLeftCriteria}\n * @memberof SodViolationContextConflictingAccessCriteria\n /\n 'leftCriteria'?: SodViolationContextConflictingAccessCriteriaLeftCriteria;\n /\n \n * @type {SodViolationContextConflictingAccessCriteriaLeftCriteria}\n * @memberof SodViolationContextConflictingAccessCriteria\n /\n 'rightCriteria'?: SodViolationContextConflictingAccessCriteriaLeftCriteria;\n}\n/\n \n * @export\n * @interface SodViolationContextConflictingAccessCriteriaLeftCriteria\n /\nexport interface SodViolationContextConflictingAccessCriteriaLeftCriteria {\n /\n \n * @type {Array<SodExemptCriteria>}\n * @memberof SodViolationContextConflictingAccessCriteriaLeftCriteria\n /\n 'criteriaList'?: Array<SodExemptCriteria>;\n}\n/\n \n * @export\n * @interface SourceAccountSelections\n /\nexport interface SourceAccountSelections {\n /\n \n * @type {DtoType}\n * @memberof SourceAccountSelections\n /\n 'type'?: DtoType;\n /\n The source id\n * @type {string}\n * @memberof SourceAccountSelections\n /\n 'id'?: string;\n /\n The source name\n * @type {string}\n * @memberof SourceAccountSelections\n /\n 'name'?: string;\n /\n The accounts information for a particular source in the requested item\n * @type {Array<AccountInfoRef>}\n * @memberof SourceAccountSelections\n /\n 'accounts'?: Array<AccountInfoRef>;\n}\n\n\n/\n \n * @export\n * @interface SourceItemRef\n /\nexport interface SourceItemRef {\n /\n The id for the source on which account selections are made\n * @type {string}\n * @memberof SourceItemRef\n /\n 'sourceId'?: string \| null;\n /\n A list of account selections on the source. Currently, only one selection per source is supported.\n * @type {Array<AccountItemRef>}\n * @memberof SourceItemRef\n /\n 'accounts'?: Array<AccountItemRef> \| null;\n}\n\n/\n AccessRequestsApi - axios parameter creator\n * @export\n /\nexport const AccessRequestsApiAxiosParamCreator = function (configuration?: Configuration) {\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {BulkApproveAccessRequest} bulkApproveAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n approveBulkAccessRequestV1: async (bulkApproveAccessRequest: BulkApproveAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'bulkApproveAccessRequest' is not null or undefined\n assertParamExists('approveBulkAccessRequestV1', 'bulkApproveAccessRequest', bulkApproveAccessRequest)\n const localVarPath = `/access-request-approvals/v1/bulk-approve`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(bulkApproveAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {BulkCancelAccessRequest} bulkCancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestInBulkV1: async (bulkCancelAccessRequest: BulkCancelAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'bulkCancelAccessRequest' is not null or undefined\n assertParamExists('cancelAccessRequestInBulkV1', 'bulkCancelAccessRequest', bulkCancelAccessRequest)\n const localVarPath = `/access-requests/v1/bulk-cancel`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(bulkCancelAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {CancelAccessRequest} cancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestV1: async (cancelAccessRequest: CancelAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'cancelAccessRequest' is not null or undefined\n assertParamExists('cancelAccessRequestV1', 'cancelAccessRequest', cancelAccessRequest)\n const localVarPath = `/access-requests/v1/cancel`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(cancelAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {CloseAccessRequest} closeAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n closeAccessRequestV1: async (closeAccessRequest: CloseAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'closeAccessRequest' is not null or undefined\n assertParamExists('closeAccessRequestV1', 'closeAccessRequest', closeAccessRequest)\n const localVarPath = `/access-requests/v1/close`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(closeAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequest} accessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n createAccessRequestV1: async (accessRequest: AccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequest' is not null or undefined\n assertParamExists('createAccessRequestV1', 'accessRequest', accessRequest)\n const localVarPath = `/access-requests/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n getAccessRequestConfigV1: async (axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-config/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getAccessRequestConfigV2: async (axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-config/v2`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {string} identityId The identity ID.\n * @param {string} entitlementId The entitlement ID\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getEntitlementDetailsForIdentityV1: async (identityId: string, entitlementId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'identityId' is not null or undefined\n assertParamExists('getEntitlementDetailsForIdentityV1', 'identityId', identityId)\n // verify required parameter 'entitlementId' is not null or undefined\n assertParamExists('getEntitlementDetailsForIdentityV1', 'entitlementId', entitlementId)\n const localVarPath = `/revocable-objects/v1`\n .replace(`{${\"identityId\"}}`, encodeURIComponent(String(identityId)))\n .replace(`{${\"entitlementId\"}}`, encodeURIComponent(String(entitlementId)));\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAccessRequestStatusV1: async (requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-status/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n if (requestedFor !== undefined) {\n localVarQueryParameter['requested-for'] = requestedFor;\n }\n\n if (requestedBy !== undefined) {\n localVarQueryParameter['requested-by'] = requestedBy;\n }\n\n if (regardingIdentity !== undefined) {\n localVarQueryParameter['regarding-identity'] = regardingIdentity;\n }\n\n if (assignedTo !== undefined) {\n localVarQueryParameter['assigned-to'] = assignedTo;\n }\n\n if (count !== undefined) {\n localVarQueryParameter['count'] = count;\n }\n\n if (limit !== undefined) {\n localVarQueryParameter['limit'] = limit;\n }\n\n if (offset !== undefined) {\n localVarQueryParameter['offset'] = offset;\n }\n\n if (filters !== undefined) {\n localVarQueryParameter['filters'] = filters;\n }\n\n if (sorters !== undefined) {\n localVarQueryParameter['sorters'] = sorters;\n }\n\n if (requestState !== undefined) {\n localVarQueryParameter['request-state'] = requestState;\n }\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {string} xSailPointExperimental Use this header to enable this experimental API.\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAdministratorsAccessRequestStatusV1: async (xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n if (xSailPointExperimental === undefined) {\n xSailPointExperimental = 'true';\n }\n \n // verify required parameter 'xSailPointExperimental' is not null or undefined\n assertParamExists('listAdministratorsAccessRequestStatusV1', 'xSailPointExperimental', xSailPointExperimental)\n const localVarPath = `/access-request-administration/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n if (requestedFor !== undefined) {\n localVarQueryParameter['requested-for'] = requestedFor;\n }\n\n if (requestedBy !== undefined) {\n localVarQueryParameter['requested-by'] = requestedBy;\n }\n\n if (regardingIdentity !== undefined) {\n localVarQueryParameter['regarding-identity'] = regardingIdentity;\n }\n\n if (assignedTo !== undefined) {\n localVarQueryParameter['assigned-to'] = assignedTo;\n }\n\n if (count !== undefined) {\n localVarQueryParameter['count'] = count;\n }\n\n if (limit !== undefined) {\n localVarQueryParameter['limit'] = limit;\n }\n\n if (offset !== undefined) {\n localVarQueryParameter['offset'] = offset;\n }\n\n if (filters !== undefined) {\n localVarQueryParameter['filters'] = filters;\n }\n\n if (sorters !== undefined) {\n localVarQueryParameter['sorters'] = sorters;\n }\n\n if (requestState !== undefined) {\n localVarQueryParameter['request-state'] = requestState;\n }\n\n\n \n if (xSailPointExperimental != null) {\n localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);\n }\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccountsSelectionRequest} accountsSelectionRequest \n * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n loadAccountSelectionsV1: async (accountsSelectionRequest: AccountsSelectionRequest, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accountsSelectionRequest' is not null or undefined\n assertParamExists('loadAccountSelectionsV1', 'accountsSelectionRequest', accountsSelectionRequest)\n if (xSailPointExperimental === undefined) {\n xSailPointExperimental = 'true';\n }\n \n const localVarPath = `/access-requests/v1/accounts-selection`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n if (xSailPointExperimental != null) {\n localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);\n }\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accountsSelectionRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig} accessRequestConfig \n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n setAccessRequestConfigV1: async (accessRequestConfig: AccessRequestConfig, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequestConfig' is not null or undefined\n assertParamExists('setAccessRequestConfigV1', 'accessRequestConfig', accessRequestConfig)\n const localVarPath = `/access-request-config/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequestConfig, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig2} accessRequestConfig2 \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n setAccessRequestConfigV2: async (accessRequestConfig2: AccessRequestConfig2, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequestConfig2' is not null or undefined\n assertParamExists('setAccessRequestConfigV2', 'accessRequestConfig2', accessRequestConfig2)\n const localVarPath = `/access-request-config/v2`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequestConfig2, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n }\n};\n\n/\n AccessRequestsApi - functional programming interface\n * @export\n /\nexport const AccessRequestsApiFp = function(configuration?: Configuration) {\n const localVarAxiosParamCreator = AccessRequestsApiAxiosParamCreator(configuration)\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {BulkApproveAccessRequest} bulkApproveAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async approveBulkAccessRequestV1(bulkApproveAccessRequest: BulkApproveAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.approveBulkAccessRequestV1(bulkApproveAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.approveBulkAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {BulkCancelAccessRequest} bulkCancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async cancelAccessRequestInBulkV1(bulkCancelAccessRequest: BulkCancelAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.cancelAccessRequestInBulkV1(bulkCancelAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.cancelAccessRequestInBulkV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {CancelAccessRequest} cancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async cancelAccessRequestV1(cancelAccessRequest: CancelAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.cancelAccessRequestV1(cancelAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.cancelAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {CloseAccessRequest} closeAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async closeAccessRequestV1(closeAccessRequest: CloseAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.closeAccessRequestV1(closeAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.closeAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequest} accessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async createAccessRequestV1(accessRequest: AccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestResponse>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.createAccessRequestV1(accessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.createAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n async getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getAccessRequestConfigV1(axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getAccessRequestConfigV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig2>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getAccessRequestConfigV2(axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getAccessRequestConfigV2']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {string} identityId The identity ID.\n * @param {string} entitlementId The entitlement ID\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async getEntitlementDetailsForIdentityV1(identityId: string, entitlementId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<IdentityEntitlementDetails>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getEntitlementDetailsForIdentityV1(identityId, entitlementId, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getEntitlementDetailsForIdentityV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async listAccessRequestStatusV1(requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<RequestedItemStatus>>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.listAccessRequestStatusV1(requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.listAccessRequestStatusV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {string} xSailPointExperimental Use this header to enable this experimental API.\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async listAdministratorsAccessRequestStatusV1(xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccessRequestAdminItemStatus>>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.listAdministratorsAccessRequestStatusV1(xSailPointExperimental, requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.listAdministratorsAccessRequestStatusV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccountsSelectionRequest} accountsSelectionRequest \n * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async loadAccountSelectionsV1(accountsSelectionRequest: AccountsSelectionRequest, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccountsSelectionResponse>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.loadAccountSelectionsV1(accountsSelectionRequest, xSailPointExperimental, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.loadAccountSelectionsV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig} accessRequestConfig \n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n async setAccessRequestConfigV1(accessRequestConfig: AccessRequestConfig, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.setAccessRequestConfigV1(accessRequestConfig, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.setAccessRequestConfigV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig2} accessRequestConfig2 \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async setAccessRequestConfigV2(accessRequestConfig2: AccessRequestConfig2, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig2>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.setAccessRequestConfigV2(accessRequestConfig2, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.setAccessRequestConfigV2']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n }\n};\n\n/\n AccessRequestsApi - factory interface\n * @export\n /\nexport const AccessRequestsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {\n const localVarFp = AccessRequestsApiFp(configuration)\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {AccessRequestsApiApproveBulkAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n approveBulkAccessRequestV1(requestParameters: AccessRequestsApiApproveBulkAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.approveBulkAccessRequestV1(requestParameters.bulkApproveAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {AccessRequestsApiCancelAccessRequestInBulkV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestInBulkV1(requestParameters: AccessRequestsApiCancelAccessRequestInBulkV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.cancelAccessRequestInBulkV1(requestParameters.bulkCancelAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {AccessRequestsApiCancelAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestV1(requestParameters: AccessRequestsApiCancelAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.cancelAccessRequestV1(requestParameters.cancelAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {AccessRequestsApiCloseAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n closeAccessRequestV1(requestParameters: AccessRequestsApiCloseAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.closeAccessRequestV1(requestParameters.closeAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequestsApiCreateAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n createAccessRequestV1(requestParameters: AccessRequestsApiCreateAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestResponse> {\n return localVarFp.createAccessRequestV1(requestParameters.accessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig> {\n return localVarFp.getAccessRequestConfigV1(axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig2> {\n return localVarFp.getAccessRequestConfigV2(axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {AccessRequestsApiGetEntitlementDetailsForIdentityV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getEntitlementDetailsForIdentityV1(requestParameters: AccessRequestsApiGetEntitlementDetailsForIdentityV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<IdentityEntitlementDetails> {\n return localVarFp.getEntitlementDetailsForIdentityV1(requestParameters.identityId, requestParameters.entitlementId, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {AccessRequestsApiListAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAccessRequestStatusV1(requestParameters: AccessRequestsApiListAccessRequestStatusV1Request = {}, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<RequestedItemStatus>> {\n return localVarFp.listAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {AccessRequestsApiListAdministratorsAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<AccessRequestAdminItemStatus>> {\n return localVarFp.listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccessRequestsApiLoadAccountSelectionsV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n loadAccountSelectionsV1(requestParameters: AccessRequestsApiLoadAccountSelectionsV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccountsSelectionResponse> {\n return localVarFp.loadAccountSelectionsV1(requestParameters.accountsSelectionRequest, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n setAccessRequestConfigV1(requestParameters: AccessRequestsApiSetAccessRequestConfigV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig> {\n return localVarFp.setAccessRequestConfigV1(requestParameters.accessRequestConfig, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV2Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n setAccessRequestConfigV2(requestParameters: AccessRequestsApiSetAccessRequestConfigV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig2> {\n return localVarFp.setAccessRequestConfigV2(requestParameters.accessRequestConfig2, axiosOptions).then((request) => request(axios, basePath));\n },\n };\n};\n\n/\n Request parameters for approveBulkAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiApproveBulkAccessRequestV1Request\n /\nexport interface AccessRequestsApiApproveBulkAccessRequestV1Request {\n /\n \n * @type {BulkApproveAccessRequest}\n * @memberof AccessRequestsApiApproveBulkAccessRequestV1\n /\n readonly bulkApproveAccessRequest: BulkApproveAccessRequest\n}\n\n/\n Request parameters for cancelAccessRequestInBulkV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCancelAccessRequestInBulkV1Request\n /\nexport interface AccessRequestsApiCancelAccessRequestInBulkV1Request {\n /\n \n * @type {BulkCancelAccessRequest}\n * @memberof AccessRequestsApiCancelAccessRequestInBulkV1\n /\n readonly bulkCancelAccessRequest: BulkCancelAccessRequest\n}\n\n/\n Request parameters for cancelAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCancelAccessRequestV1Request\n /\nexport interface AccessRequestsApiCancelAccessRequestV1Request {\n /\n \n * @type {CancelAccessRequest}\n * @memberof AccessRequestsApiCancelAccessRequestV1\n /\n readonly cancelAccessRequest: CancelAccessRequest\n}\n\n/\n Request parameters for closeAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCloseAccessRequestV1Request\n /\nexport interface AccessRequestsApiCloseAccessRequestV1Request {\n /\n \n * @type {CloseAccessRequest}\n * @memberof AccessRequestsApiCloseAccessRequestV1\n /\n readonly closeAccessRequest: CloseAccessRequest\n}\n\n/\n Request parameters for createAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCreateAccessRequestV1Request\n /\nexport interface AccessRequestsApiCreateAccessRequestV1Request {\n /\n \n * @type {AccessRequest}\n * @memberof AccessRequestsApiCreateAccessRequestV1\n /\n readonly accessRequest: AccessRequest\n}\n\n/\n Request parameters for getEntitlementDetailsForIdentityV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiGetEntitlementDetailsForIdentityV1Request\n /\nexport interface AccessRequestsApiGetEntitlementDetailsForIdentityV1Request {\n /\n The identity ID.\n * @type {string}\n * @memberof AccessRequestsApiGetEntitlementDetailsForIdentityV1\n /\n readonly identityId: string\n\n /\n The entitlement ID\n * @type {string}\n * @memberof AccessRequestsApiGetEntitlementDetailsForIdentityV1\n /\n readonly entitlementId: string\n}\n\n/\n Request parameters for listAccessRequestStatusV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiListAccessRequestStatusV1Request\n /\nexport interface AccessRequestsApiListAccessRequestStatusV1Request {\n /\n Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestedFor?: string\n\n /\n Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestedBy?: string\n\n /\n Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly regardingIdentity?: string\n\n /\n Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly assignedTo?: string\n\n /\n If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @type {boolean}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly count?: boolean\n\n /\n Max number of results to return.\n * @type {number}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly limit?: number\n\n /\n Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @type {number}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly offset?: number\n\n /\n Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly filters?: string\n\n /\n Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly sorters?: string\n\n /\n Filter the results by the state of the request. The only valid value is EXECUTING.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestState?: string\n}\n\n/\n Request parameters for listAdministratorsAccessRequestStatusV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request\n /\nexport interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request {\n /\n Use this header to enable this experimental API.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly xSailPointExperimental: string\n\n /\n Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestedFor?: string\n\n /\n Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestedBy?: string\n\n /\n Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly regardingIdentity?: string\n\n /\n Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly assignedTo?: string\n\n /\n If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @type {boolean}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly count?: boolean\n\n /\n Max number of results to return.\n * @type {number}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly limit?: number\n\n /\n Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @type {number}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly offset?: number\n\n /\n Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly filters?: string\n\n /\n Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly sorters?: string\n\n /\n Filter the results by the state of the request. The only valid value is EXECUTING.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestState?: string\n}\n\n/\n Request parameters for loadAccountSelectionsV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiLoadAccountSelectionsV1Request\n /\nexport interface AccessRequestsApiLoadAccountSelectionsV1Request {\n /\n \n * @type {AccountsSelectionRequest}\n * @memberof AccessRequestsApiLoadAccountSelectionsV1\n /\n readonly accountsSelectionRequest: AccountsSelectionRequest\n\n /\n Use this header to enable this experimental API.\n * @type {string}\n * @memberof AccessRequestsApiLoadAccountSelectionsV1\n /\n readonly xSailPointExperimental?: string\n}\n\n/\n Request parameters for setAccessRequestConfigV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiSetAccessRequestConfigV1Request\n /\nexport interface AccessRequestsApiSetAccessRequestConfigV1Request {\n /\n \n * @type {AccessRequestConfig}\n * @memberof AccessRequestsApiSetAccessRequestConfigV1\n /\n readonly accessRequestConfig: AccessRequestConfig\n}\n\n/\n Request parameters for setAccessRequestConfigV2 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiSetAccessRequestConfigV2Request\n /\nexport interface AccessRequestsApiSetAccessRequestConfigV2Request {\n /\n \n * @type {AccessRequestConfig2}\n * @memberof AccessRequestsApiSetAccessRequestConfigV2\n /\n readonly accessRequestConfig2: AccessRequestConfig2\n}\n\n/\n AccessRequestsApi - object-oriented interface\n * @export\n * @class AccessRequestsApi\n * @extends {BaseAPI}\n /\nexport class AccessRequestsApi extends BaseAPI {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {AccessRequestsApiApproveBulkAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public approveBulkAccessRequestV1(requestParameters: AccessRequestsApiApproveBulkAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).approveBulkAccessRequestV1(requestParameters.bulkApproveAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {AccessRequestsApiCancelAccessRequestInBulkV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public cancelAccessRequestInBulkV1(requestParameters: AccessRequestsApiCancelAccessRequestInBulkV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).cancelAccessRequestInBulkV1(requestParameters.bulkCancelAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {AccessRequestsApiCancelAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public cancelAccessRequestV1(requestParameters: AccessRequestsApiCancelAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).cancelAccessRequestV1(requestParameters.cancelAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {AccessRequestsApiCloseAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public closeAccessRequestV1(requestParameters: AccessRequestsApiCloseAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).closeAccessRequestV1(requestParameters.closeAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequestsApiCreateAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public createAccessRequestV1(requestParameters: AccessRequestsApiCreateAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).createAccessRequestV1(requestParameters.accessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getAccessRequestConfigV1(axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getAccessRequestConfigV2(axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {AccessRequestsApiGetEntitlementDetailsForIdentityV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getEntitlementDetailsForIdentityV1(requestParameters: AccessRequestsApiGetEntitlementDetailsForIdentityV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getEntitlementDetailsForIdentityV1(requestParameters.identityId, requestParameters.entitlementId, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {AccessRequestsApiListAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public listAccessRequestStatusV1(requestParameters: AccessRequestsApiListAccessRequestStatusV1Request = {}, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).listAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {AccessRequestsApiListAdministratorsAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccessRequestsApiLoadAccountSelectionsV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public loadAccountSelectionsV1(requestParameters: AccessRequestsApiLoadAccountSelectionsV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).loadAccountSelectionsV1(requestParameters.accountsSelectionRequest, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public setAccessRequestConfigV1(requestParameters: AccessRequestsApiSetAccessRequestConfigV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).setAccessRequestConfigV1(requestParameters.accessRequestConfig, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV2Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n */\n public setAccessRequestConfigV2(requestParameters: AccessRequestsApiSetAccessRequestConfigV2Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).setAccessRequestConfigV2(requestParameters.accessRequestConfig2, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n}\n\n\n\n"]}
1	+ {"version":3,"file":"api.js","sourceRoot":"","sources":["../../access_requests/api.ts"],"names":[],"mappings":";AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKH,gDAAgC;AAChC,yDAAyD;AACzD,aAAa;AACb,mCAA4N;AAE5N,aAAa;AACb,+BAAmG;AA4BtF,QAAA,2BAA2B,GAAG;IACvC,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,4BAA4B,GAAG;IACxC,QAAQ,EAAE,UAAU;CACd,CAAC;AA2NE,QAAA,oCAAoC,GAAG;IAChD,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAGE,QAAA,4CAA4C,GAAG;IACxD,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAwJE,QAAA,yBAAyB,GAAG;IACrC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AA6FE,QAAA,4BAA4B,GAAG;IACxC,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,cAAc;CACrB,CAAC;AAGE,QAAA,6BAA6B,GAAG;IACzC,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;CACV,CAAC;AAsDX;;;;GAIG;AAEU,QAAA,iBAAiB,GAAG;IAC7B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;CACvB,CAAC;AA+LX;;;;GAIG;AAEU,QAAA,cAAc,GAAG;IAC1B,QAAQ,EAAE,WAAW;IACrB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,YAAY;IACvB,kBAAkB,EAAE,sBAAsB;IAC1C,gBAAgB,EAAE,mBAAmB;IACrC,eAAe,EAAE,kBAAkB;CAC7B,CAAC;AA8FE,QAAA,qCAAqC,GAAG;IACjD,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,sCAAsC,GAAG;IAClD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AAsHE,QAAA,qCAAqC,GAAG;IACjD,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;CAChB,CAAC;AAGE,QAAA,sCAAsC,GAAG;IAClD,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;CACZ,CAAC;AAuDE,QAAA,wBAAwB,GAAG;IACpC,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX;;;;GAIG;AAEU,QAAA,OAAO,GAAG;IACnB,wBAAwB,EAAE,4BAA4B;IACtD,aAAa,EAAE,gBAAgB;IAC/B,qBAAqB,EAAE,yBAAyB;IAChD,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,cAAc,EAAE,iBAAiB;IACjC,aAAa,EAAE,eAAe;IAC9B,OAAO,EAAE,SAAS;IAClB,eAAe,EAAE,kBAAkB;IACnC,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;IACpB,eAAe,EAAE,kBAAkB;IACnC,eAAe,EAAE,kBAAkB;IACnC,eAAe,EAAE,kBAAkB;IACnC,cAAc,EAAE,iBAAiB;IACjC,cAAc,EAAE,iBAAiB;IACjC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,KAAK;IACV,WAAW,EAAE,cAAc;IAC3B,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,eAAe,EAAE,kBAAkB;IACnC,SAAS,EAAE,WAAW;CAChB,CAAC;AA0EE,QAAA,oEAAoE,GAAG;IAChF,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACV,CAAC;AAwBE,QAAA,yCAAyC,GAAG;IACrD,gBAAgB,EAAE,mBAAmB;IACrC,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AA2YX;;;;GAIG;AAEU,QAAA,YAAY,GAAG;IACxB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACZ,CAAC;AA4EE,QAAA,yCAAyC,GAAG;IACrD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,0CAA0C,GAAG;IACtD,eAAe,EAAE,kBAAkB;IACnC,QAAQ,EAAE,UAAU;CACd,CAAC;AAIX;;;;GAIG;AAEU,QAAA,mBAAmB,GAAG;IAC/B,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;CACd,CAAC;AA+BE,QAAA,gBAAgB,GAAG;IAC5B,QAAQ,EAAE,UAAU;CACd,CAAC;AA8BE,QAAA,qCAAqC,GAAG;IACjD,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACd,CAAC;AAiBX;;;;GAIG;AAEU,QAAA,gBAAgB,GAAG;IAC5B,kBAAkB,EAAE,qBAAqB;IACzC,qBAAqB,EAAE,wBAAwB;IAC/C,cAAc,EAAE,iBAAiB;IACjC,oBAAoB,EAAE,wBAAwB;CACxC,CAAC;AAoIE,QAAA,kCAAkC,GAAG;IAC9C,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAsDE,QAAA,sCAAsC,GAAG;IAClD,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAwBE,QAAA,4BAA4B,GAAG;IACxC,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,MAAM;CACN,CAAC;AAkEE,QAAA,2BAA2B,GAAG;IACvC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAsME,QAAA,2BAA2B,GAAG;IACvC,aAAa,EAAE,gBAAgB;IAC/B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;CACpB,CAAC;AAGE,QAAA,mCAAmC,GAAG;IAC/C,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACZ,CAAC;AAkGE,QAAA,wDAAwD,GAAG;IACpE,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACd,CAAC;AAiBX;;;;GAIG;AAEU,QAAA,+BAA+B,GAAG;IAC3C,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,mBAAmB;IACrC,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,+BAA+B,EAAE,mCAAmC;IACpE,QAAQ,EAAE,UAAU;IACpB,kBAAkB,EAAE,qBAAqB;IACzC,sBAAsB,EAAE,2BAA2B;IACnD,KAAK,EAAE,OAAO;CACR,CAAC;AA+BE,QAAA,uCAAuC,GAAG;IACnD,QAAQ,EAAE,UAAU;IACpB,eAAe,EAAE,kBAAkB;CAC7B,CAAC;AAuDE,QAAA,+CAA+C,GAAG;IAC3D,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACR,CAAC;AA+DE,QAAA,oBAAoB,GAAG;IAChC,SAAS,EAAE,YAAY;CACjB,CAAC;AAgFE,QAAA,0CAA0C,GAAG;IACtD,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;CACR,CAAC;AAyFX;;;GAGG;AACI,IAAM,kCAAkC,GAAG,UAAU,aAA6B;IAAvC,iBAyjBjD;IAxjBG,OAAO;QACH;;;;;;WAMG;QACH,0BAA0B,EAAE,UAAO,wBAAkD,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC3H,gFAAgF;oBAChF,IAAA,0BAAiB,EAAC,4BAA4B,EAAE,0BAA0B,EAAE,wBAAwB,CAAC,CAAA;oBAC/F,YAAY,GAAG,2CAA2C,CAAC;oBAE3D,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,wBAAwB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEpH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,2BAA2B,EAAE,UAAO,uBAAgD,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC1H,+EAA+E;oBAC/E,IAAA,0BAAiB,EAAC,6BAA6B,EAAE,yBAAyB,EAAE,uBAAuB,CAAC,CAAA;oBAC9F,YAAY,GAAG,iCAAiC,CAAC;oBAEjD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEnH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE,UAAO,mBAAwC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC5G,2EAA2E;oBAC3E,IAAA,0BAAiB,EAAC,uBAAuB,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAA;oBAChF,YAAY,GAAG,4BAA4B,CAAC;oBAE5C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE/G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,oBAAoB,EAAE,UAAO,kBAAsC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACzG,0EAA0E;oBAC1E,IAAA,0BAAiB,EAAC,sBAAsB,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAA;oBAC7E,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,kBAAkB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE9G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,qBAAqB,EAAE,UAAO,aAA4B,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAChG,qEAAqE;oBACrE,IAAA,0BAAiB,EAAC,uBAAuB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;oBACpE,YAAY,GAAG,qBAAqB,CAAC;oBAErC,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,aAAa,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEzG,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,wBAAwB,EAAE,UAAO,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/D,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;WAKG;QACH,wBAAwB,EAAE,UAAO,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/D,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,kCAAkC,EAAE,UAAO,UAAkB,EAAE,aAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC1H,kEAAkE;oBAClE,IAAA,0BAAiB,EAAC,oCAAoC,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;oBACjF,qEAAqE;oBACrE,IAAA,0BAAiB,EAAC,oCAAoC,EAAE,eAAe,EAAE,aAAa,CAAC,CAAA;oBACjF,YAAY,GAAG,uBAAuB;yBACvC,OAAO,CAAC,WAAI,YAAY,MAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;yBACpE,OAAO,CAAC,WAAI,eAAe,MAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;oBAE1E,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;;;;;;;;;WAeG;QACH,yBAAyB,EAAE,UAAO,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC3Q,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAEzC,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAED,IAAI,WAAW,KAAK,SAAS,EAAE;wBAC3B,sBAAsB,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;qBACxD;oBAED,IAAI,iBAAiB,KAAK,SAAS,EAAE;wBACjC,sBAAsB,CAAC,oBAAoB,CAAC,GAAG,iBAAiB,CAAC;qBACpE;oBAED,IAAI,UAAU,KAAK,SAAS,EAAE;wBAC1B,sBAAsB,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;qBACtD;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,sBAAsB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;qBAC7C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAID,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;;;;;;;;;;WAgBG;QACH,uCAAuC,EAAE,UAAO,sBAA8B,EAAE,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/T,IAAI,sBAAsB,KAAK,SAAS,EAAE;wBACtC,sBAAsB,GAAG,MAAM,CAAC;qBACnC;oBAED,8EAA8E;oBAC9E,IAAA,0BAAiB,EAAC,yCAAyC,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAA;oBACxG,YAAY,GAAG,mCAAmC,CAAC;oBAEnD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAEzC,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAED,IAAI,WAAW,KAAK,SAAS,EAAE;wBAC3B,sBAAsB,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;qBACxD;oBAED,IAAI,iBAAiB,KAAK,SAAS,EAAE;wBACjC,sBAAsB,CAAC,oBAAoB,CAAC,GAAG,iBAAiB,CAAC;qBACpE;oBAED,IAAI,UAAU,KAAK,SAAS,EAAE;wBAC1B,sBAAsB,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;qBACtD;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,KAAK,KAAK,SAAS,EAAE;wBACrB,sBAAsB,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;qBAC3C;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE;wBACtB,sBAAsB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;qBAC7C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,OAAO,KAAK,SAAS,EAAE;wBACvB,sBAAsB,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;qBAC/C;oBAED,IAAI,YAAY,KAAK,SAAS,EAAE;wBAC5B,sBAAsB,CAAC,eAAe,CAAC,GAAG,YAAY,CAAC;qBAC1D;oBAID,IAAI,sBAAsB,IAAI,IAAI,EAAE;wBAChC,uBAAuB,CAAC,0BAA0B,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;qBACxF;oBACD,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAElH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,uBAAuB,EAAE,UAAO,wBAAkD,EAAE,sBAA+B,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACzJ,gFAAgF;oBAChF,IAAA,0BAAiB,EAAC,yBAAyB,EAAE,0BAA0B,EAAE,wBAAwB,CAAC,CAAA;oBAClG,IAAI,sBAAsB,KAAK,SAAS,EAAE;wBACtC,sBAAsB,GAAG,MAAM,CAAC;qBACnC;oBAEK,YAAY,GAAG,wCAAwC,CAAC;oBAExD,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,MAAM,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC5E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAI,sBAAsB,IAAI,IAAI,EAAE;wBAChC,uBAAuB,CAAC,0BAA0B,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;qBACxF;oBACD,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,wBAAwB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEpH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;;WAOG;QACH,wBAAwB,EAAE,UAAO,mBAAwC,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBAC/G,2EAA2E;oBAC3E,IAAA,0BAAiB,EAAC,0BAA0B,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAA;oBACnF,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,mBAAmB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAE/G,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;QACD;;;;;;WAMG;QACH,wBAAwB,EAAE,UAAO,oBAA0C,EAAE,YAAwC;YAAxC,6BAAA,EAAA,iBAAwC;;;;oBACjH,4EAA4E;oBAC5E,IAAA,0BAAiB,EAAC,0BAA0B,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAA;oBACrF,YAAY,GAAG,2BAA2B,CAAC;oBAE3C,cAAc,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,uBAAc,CAAC,CAAC;oBAE7D,IAAI,aAAa,EAAE;wBACf,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;qBAC3C;oBAEK,sBAAsB,uBAAK,MAAM,EAAE,KAAK,IAAK,WAAW,GAAK,YAAY,CAAC,CAAC;oBAC3E,uBAAuB,GAAG,EAAS,CAAC;oBACpC,sBAAsB,GAAG,EAAS,CAAC;oBAIzC,uBAAuB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;oBAE7D,IAAA,wBAAe,EAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;oBACpD,sBAAsB,GAAG,WAAW,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3F,sBAAsB,CAAC,OAAO,kCAAO,uBAAuB,GAAK,sBAAsB,GAAK,YAAY,CAAC,OAAO,CAAC,CAAC;oBAClH,sBAAsB,CAAC,IAAI,GAAG,IAAA,8BAAqB,EAAC,oBAAoB,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAA;oBAEhH,sBAAO;4BACH,GAAG,EAAE,IAAA,qBAAY,EAAC,cAAc,CAAC;4BACjC,YAAY,EAAE,sBAAsB;yBACvC,EAAC;;;SACL;KACJ,CAAA;AACL,CAAC,CAAC;AAzjBW,QAAA,kCAAkC,sCAyjB7C;AAEF;;;GAGG;AACI,IAAM,mBAAmB,GAAG,UAAS,aAA6B;IACrE,IAAM,yBAAyB,GAAG,IAAA,0CAAkC,EAAC,aAAa,CAAC,CAAA;IACnF,OAAO;QACH;;;;;;WAMG;QACG,0BAA0B,YAAC,wBAAkD,EAAE,YAAoC;;;;;;gCAC3F,qBAAM,yBAAyB,CAAC,0BAA0B,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAAA;;4BAAtH,iBAAiB,GAAG,SAAkG;4BACtH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,8CAA8C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAChJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,2BAA2B,YAAC,uBAAgD,EAAE,YAAoC;;;;;;gCAC1F,qBAAM,yBAAyB,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,YAAY,CAAC,EAAA;;4BAAtH,iBAAiB,GAAG,SAAkG;4BACtH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,+CAA+C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BACjJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,qBAAqB,YAAC,mBAAwC,EAAE,YAAoC;;;;;;gCAC5E,qBAAM,yBAAyB,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAA;;4BAA5G,iBAAiB,GAAG,SAAwF;4BAC5G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,yCAAyC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC3I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,oBAAoB,YAAC,kBAAsC,EAAE,YAAoC;;;;;;gCACzE,qBAAM,yBAAyB,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,YAAY,CAAC,EAAA;;4BAA1G,iBAAiB,GAAG,SAAsF;4BAC1G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,wCAAwC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC1I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,qBAAqB,YAAC,aAA4B,EAAE,YAAoC;;;;;;gCAChE,qBAAM,yBAAyB,CAAC,qBAAqB,CAAC,aAAa,EAAE,YAAY,CAAC,EAAA;;4BAAtG,iBAAiB,GAAG,SAAkF;4BACtG,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,yCAAyC,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC3I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,wBAAwB,YAAC,YAAoC;;;;;;gCACrC,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAA;;4BAA1F,iBAAiB,GAAG,SAAsE;4BAC1F,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;WAKG;QACG,wBAAwB,YAAC,YAAoC;;;;;;gCACrC,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,YAAY,CAAC,EAAA;;4BAA1F,iBAAiB,GAAG,SAAsE;4BAC1F,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,kCAAkC,YAAC,UAAkB,EAAE,aAAqB,EAAE,YAAoC;;;;;;gCAC1F,qBAAM,yBAAyB,CAAC,kCAAkC,CAAC,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,EAAA;;4BAA/H,iBAAiB,GAAG,SAA2G;4BAC/H,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,sDAAsD,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BACxJ,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;;;;;;;;;WAeG;QACG,yBAAyB,YAAC,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAoC;;;;;;gCACjP,qBAAM,yBAAyB,CAAC,yBAAyB,CAAC,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,EAAA;;4BAA3M,iBAAiB,GAAG,SAAuL;4BAC3M,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,6CAA6C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC/I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;;;;;;;;;;WAgBG;QACG,uCAAuC,YAAC,sBAA8B,EAAE,YAAqB,EAAE,WAAoB,EAAE,iBAA0B,EAAE,UAAmB,EAAE,KAAe,EAAE,KAAc,EAAE,MAAe,EAAE,OAAgB,EAAE,OAAgB,EAAE,YAAqB,EAAE,YAAoC;;;;;;gCAC/R,qBAAM,yBAAyB,CAAC,uCAAuC,CAAC,sBAAsB,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,EAAA;;4BAAjP,iBAAiB,GAAG,SAA6N;4BACjP,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,2DAA2D,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC7J,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,uBAAuB,YAAC,wBAAkD,EAAE,sBAA+B,EAAE,YAAoC;;;;;;gCACzH,qBAAM,yBAAyB,CAAC,uBAAuB,CAAC,wBAAwB,EAAE,sBAAsB,EAAE,YAAY,CAAC,EAAA;;4BAA3I,iBAAiB,GAAG,SAAuH;4BAC3I,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,2CAA2C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC7I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;;WAOG;QACG,wBAAwB,YAAC,mBAAwC,EAAE,YAAoC;;;;;;gCAC/E,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAA;;4BAA/G,iBAAiB,GAAG,SAA2F;4BAC/G,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;QACD;;;;;;WAMG;QACG,wBAAwB,YAAC,oBAA0C,EAAE,YAAoC;;;;;;gCACjF,qBAAM,yBAAyB,CAAC,wBAAwB,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAA;;4BAAhH,iBAAiB,GAAG,SAA4F;4BAChH,4BAA4B,GAAG,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,WAAW,mCAAI,CAAC,CAAC;4BAC/D,+BAA+B,GAAG,MAAA,MAAA,yBAAkB,CAAC,4CAA4C,CAAC,0CAAG,4BAA4B,CAAC,0CAAE,GAAG,CAAC;4BAC9I,sBAAO,UAAC,KAAK,EAAE,QAAQ,IAAK,OAAA,IAAA,8BAAqB,EAAC,iBAAiB,EAAE,eAAW,EAAE,gBAAS,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,+BAA+B,IAAI,QAAQ,CAAC,EAAnI,CAAmI,EAAC;;;;SACnK;KACJ,CAAA;AACL,CAAC,CAAC;AAlMW,QAAA,mBAAmB,uBAkM9B;AAEF;;;GAGG;AACI,IAAM,wBAAwB,GAAG,UAAU,aAA6B,EAAE,QAAiB,EAAE,KAAqB;IACrH,IAAM,UAAU,GAAG,IAAA,2BAAmB,EAAC,aAAa,CAAC,CAAA;IACrD,OAAO;QACH;;;;;;WAMG;QACH,0BAA0B,YAAC,iBAAqE,EAAE,YAAoC;YAClI,OAAO,UAAU,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvJ,CAAC;QACD;;;;;;WAMG;QACH,2BAA2B,YAAC,iBAAsE,EAAE,YAAoC;YACpI,OAAO,UAAU,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvJ,CAAC;QACD;;;;;;WAMG;QACH,qBAAqB,YAAC,iBAAgE,EAAE,YAAoC;YACxH,OAAO,UAAU,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC7I,CAAC;QACD;;;;;;WAMG;QACH,oBAAoB,YAAC,iBAA+D,EAAE,YAAoC;YACtH,OAAO,UAAU,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC3I,CAAC;QACD;;;;;;WAMG;QACH,qBAAqB,YAAC,iBAAgE,EAAE,YAAoC;YACxH,OAAO,UAAU,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACvI,CAAC;QACD;;;;;;WAMG;QACH,wBAAwB,YAAC,YAAoC;YACzD,OAAO,UAAU,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACzG,CAAC;QACD;;;;;WAKG;QACH,wBAAwB,YAAC,YAAoC;YACzD,OAAO,UAAU,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACzG,CAAC;QACD;;;;;;WAMG;QACH,kCAAkC,YAAC,iBAA6E,EAAE,YAAoC;YAClJ,OAAO,UAAU,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAClL,CAAC;QACD;;;;;;WAMG;QACH,yBAAyB,YAAC,iBAAyE,EAAE,YAAoC;YAA/G,kCAAA,EAAA,sBAAyE;YAC/F,OAAO,UAAU,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC9Y,CAAC;QACD;;;;;;WAMG;QACH,uCAAuC,YAAC,iBAAkF,EAAE,YAAoC;YAC5J,OAAO,UAAU,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACtc,CAAC;QACD;;;;;;WAMG;QACH,uBAAuB,YAAC,iBAAkE,EAAE,YAAoC;YAC5H,OAAO,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAC9L,CAAC;QACD;;;;;;;WAOG;QACH,wBAAwB,YAAC,iBAAmE,EAAE,YAAoC;YAC9H,OAAO,UAAU,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QAChJ,CAAC;QACD;;;;;;WAMG;QACH,wBAAwB,YAAC,iBAAmE,EAAE,YAAoC;YAC9H,OAAO,UAAU,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAxB,CAAwB,CAAC,CAAC;QACjJ,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAtIW,QAAA,wBAAwB,4BAsInC;AA+SF;;;;;GAKG;AACH;IAAuC,qCAAO;IAA9C;;IA4JA,CAAC;IA3JG;;;;;;;OAOG;IACI,sDAA0B,GAAjC,UAAkC,iBAAqE,EAAE,YAAoC;QAA7I,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,0BAA0B,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9L,CAAC;IAED;;;;;;;OAOG;IACI,uDAA2B,GAAlC,UAAmC,iBAAsE,EAAE,YAAoC;QAA/I,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9L,CAAC;IAED;;;;;;;OAOG;IACI,iDAAqB,GAA5B,UAA6B,iBAAgE,EAAE,YAAoC;QAAnI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACpL,CAAC;IAED;;;;;;;OAOG;IACI,gDAAoB,GAA3B,UAA4B,iBAA+D,EAAE,YAAoC;QAAjI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAClL,CAAC;IAED;;;;;;;OAOG;IACI,iDAAqB,GAA5B,UAA6B,iBAAgE,EAAE,YAAoC;QAAnI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC9K,CAAC;IAED;;;;;;;OAOG;IACI,oDAAwB,GAA/B,UAAgC,YAAoC;QAApE,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;OAMG;IACI,oDAAwB,GAA/B,UAAgC,YAAoC;QAApE,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;;OAOG;IACI,8DAAkC,GAAzC,UAA0C,iBAA6E,EAAE,YAAoC;QAA7J,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,kCAAkC,CAAC,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACzN,CAAC;IAED;;;;;;;OAOG;IACI,qDAAyB,GAAhC,UAAiC,iBAAyE,EAAE,YAAoC;QAAhJ,iBAEC;QAFgC,kCAAA,EAAA,sBAAyE;QACtG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACrb,CAAC;IAED;;;;;;;OAOG;IACI,mEAAuC,GAA9C,UAA+C,iBAAkF,EAAE,YAAoC;QAAvK,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,uCAAuC,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,YAAY,EAAE,iBAAiB,CAAC,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IAC7e,CAAC;IAED;;;;;;;OAOG;IACI,mDAAuB,GAA9B,UAA+B,iBAAkE,EAAE,YAAoC;QAAvI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACrO,CAAC;IAED;;;;;;;;OAQG;IACI,oDAAwB,GAA/B,UAAgC,iBAAmE,EAAE,YAAoC;QAAzI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACvL,CAAC;IAED;;;;;;;OAOG;IACI,oDAAwB,GAA/B,UAAgC,iBAAmE,EAAE,YAAoC;QAAzI,iBAEC;QADG,OAAO,IAAA,2BAAmB,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,UAAC,OAAO,IAAK,OAAA,OAAO,CAAC,KAAI,CAAC,KAAK,EAAE,KAAI,CAAC,QAAQ,CAAC,EAAlC,CAAkC,CAAC,CAAC;IACxL,CAAC;IACL,wBAAC;AAAD,CAAC,AA5JD,CAAuC,cAAO,GA4J7C;AA5JY,8CAAiB","sourcesContent":["/* tslint:disable /\n/ eslint-disable /\n/\n Identity Security Cloud API - Access Requests\n * Use these APIs to interact with the Identity Security Cloud platform to achieve repeatable, automated processes with greater scalability. We encourage you to join the SailPoint Developer Community forum at https://developer.sailpoint.com/discuss to connect with other developers using our APIs.\n \n The version of the OpenAPI document: v1\n * \n \n NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).\n * https://openapi-generator.tech\n * Do not edit the class manually.\n /\n\n\nimport type { Configuration } from '../configuration';\nimport type { AxiosPromise, AxiosInstance, RawAxiosRequestConfig } from 'axios';\nimport globalAxios from 'axios';\n// Some imports not used depending on template conditions\n// @ts-ignore\nimport { DUMMY_BASE_URL, assertParamExists, setApiKeyToObject, setBasicAuthToObject, setBearerAuthToObject, setOAuthToObject, setSearchParams, serializeDataIfNeeded, toPathString, createRequestFunction } from './common';\nimport type { RequestArgs } from './base';\n// @ts-ignore\nimport { BASE_PATH, COLLECTION_FORMATS, BaseAPI, RequiredError, operationServerMap } from './base';\n\n/\n Access item requester\\'s identity.\n * @export\n * @interface AccessItemRequester\n /\nexport interface AccessItemRequester {\n /\n Access item requester\\'s DTO type.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'type'?: AccessItemRequesterTypeEnum;\n /\n Access item requester\\'s identity ID.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'id'?: string;\n /\n Access item owner\\'s human-readable display name.\n * @type {string}\n * @memberof AccessItemRequester\n /\n 'name'?: string;\n}\n\nexport const AccessItemRequesterTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type AccessItemRequesterTypeEnum = typeof AccessItemRequesterTypeEnum[keyof typeof AccessItemRequesterTypeEnum];\n\n/\n Identity who reviewed the access item request.\n * @export\n * @interface AccessItemReviewedBy\n /\nexport interface AccessItemReviewedBy {\n /\n DTO type of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'type'?: AccessItemReviewedByTypeEnum;\n /\n ID of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'id'?: string;\n /\n Human-readable display name of identity who reviewed the access item request.\n * @type {string}\n * @memberof AccessItemReviewedBy\n /\n 'name'?: string;\n}\n\nexport const AccessItemReviewedByTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type AccessItemReviewedByTypeEnum = typeof AccessItemReviewedByTypeEnum[keyof typeof AccessItemReviewedByTypeEnum];\n\n/\n \n * @export\n * @interface AccessRequest\n /\nexport interface AccessRequest {\n /\n A list of Identity IDs for whom the Access is requested. If it\\'s a Revoke request, there can only be one Identity ID. * Used for human identity requests with the \\'requestedItems\\' field. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems` (including all machine identity requests).\n * @type {Array<string>}\n * @memberof AccessRequest\n /\n 'requestedFor'?: Array<string>;\n /\n \n * @type {AccessRequestType}\n * @memberof AccessRequest\n /\n 'requestType'?: AccessRequestType \| null;\n /\n * Used for human identity requests with the \\'requestedFor\\' field. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems`.\n * @type {Array<AccessRequestItem>}\n * @memberof AccessRequest\n /\n 'requestedItems'?: Array<AccessRequestItem>;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities.\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequest\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n Additional submit data structure with requestedFor containing requestedItems allowing distinction for each request item and Identity. * Can only be used when \\'requestedFor\\' and \\'requestedItems\\' are not separately provided * Adds ability to specify which account the user wants the access on, in case they have multiple accounts on a source. * Allows the ability to request items with different start dates and remove dates. * Also allows different combinations of request items and identities in the same request. * For human identities, primarily used with GRANT_ACCESS (and related multi-account flows). Human REVOKE_ACCESS continues to use the flat `requestedFor` / `requestedItems` shape. * Required for machine identity access requests. Set `identityType: MACHINE` on each entry. Machine requests support GRANT_ACCESS, MODIFY_ACCESS, and REVOKE_ACCESS with the constraints documented on the create endpoint and item schemas (entitlement-only; grant/modify account selection; revoke nativeIdentity). \n * @type {Array<RequestedForDtoRef>}\n * @memberof AccessRequest\n /\n 'requestedForWithRequestedItems'?: Array<RequestedForDtoRef> \| null;\n}\n\n\n/\n \n * @export\n * @interface AccessRequestAdminItemStatus\n /\nexport interface AccessRequestAdminItemStatus {\n /\n ID of the access request. This is a new property as of 2025. Older access requests may not have an ID.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'id'?: string \| null;\n /\n Human-readable display name of the item being requested.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'name'?: string \| null;\n /\n Type of requested object.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'type'?: AccessRequestAdminItemStatusTypeEnum \| null;\n /\n \n * @type {RequestedItemStatusCancelledRequestDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'cancelledRequestDetails'?: RequestedItemStatusCancelledRequestDetails;\n /\n List of localized error messages, if any, encountered during the approval/provisioning process.\n * @type {Array<Array<ErrorMessageDto>>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'errorMessages'?: Array<Array<ErrorMessageDto>> \| null;\n /\n \n * @type {RequestedItemStatusRequestState}\n * @memberof AccessRequestAdminItemStatus\n /\n 'state'?: RequestedItemStatusRequestState;\n /\n Approval details for each item.\n * @type {Array<ApprovalStatusDto>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'approvalDetails'?: Array<ApprovalStatusDto>;\n /\n Manual work items created for provisioning the item.\n * @type {Array<ManualWorkItemDetails>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'manualWorkItemDetails'?: Array<ManualWorkItemDetails> \| null;\n /\n Id of associated account activity item.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accountActivityItemId'?: string;\n /\n \n * @type {AccessRequestType}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requestType'?: AccessRequestType \| null;\n /\n When the request was last modified.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'modified'?: string \| null;\n /\n When the request was created.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'created'?: string;\n /\n \n * @type {AccessItemRequester}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requester'?: AccessItemRequester;\n /\n \n * @type {RequestedItemStatusRequestedFor}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requestedFor'?: RequestedItemStatusRequestedFor;\n /\n Type of identity the access was requested for. Requests without a stored identity type are returned as `HUMAN`. \n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'identityType'?: AccessRequestAdminItemStatusIdentityTypeEnum;\n /\n \n * @type {RequestedItemStatusRequesterComment}\n * @memberof AccessRequestAdminItemStatus\n /\n 'requesterComment'?: RequestedItemStatusRequesterComment;\n /\n \n * @type {RequestedItemStatusSodViolationContext}\n * @memberof AccessRequestAdminItemStatus\n /\n 'sodViolationContext'?: RequestedItemStatusSodViolationContext;\n /\n \n * @type {RequestedItemStatusProvisioningDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'provisioningDetails'?: RequestedItemStatusProvisioningDetails;\n /\n \n * @type {RequestedItemStatusPreApprovalTriggerDetails}\n * @memberof AccessRequestAdminItemStatus\n /\n 'preApprovalTriggerDetails'?: RequestedItemStatusPreApprovalTriggerDetails;\n /\n A list of Phases that the Access Request has gone through in order, to help determine the status of the request.\n * @type {Array<AccessRequestPhases>}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accessRequestPhases'?: Array<AccessRequestPhases> \| null;\n /\n Description associated to the requested object.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'description'?: string \| null;\n /\n When the role access is scheduled for provisioning.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'startDate'?: string \| null;\n /\n When the role access is scheduled for removal.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'removeDate'?: string \| null;\n /\n True if the request can be canceled.\n * @type {boolean}\n * @memberof AccessRequestAdminItemStatus\n /\n 'cancelable'?: boolean;\n /\n True if re-auth is required.\n * @type {boolean}\n * @memberof AccessRequestAdminItemStatus\n /\n 'reauthorizationRequired'?: boolean;\n /\n This is the account activity id.\n * @type {string}\n * @memberof AccessRequestAdminItemStatus\n /\n 'accessRequestId'?: string;\n /\n Arbitrary key-value pairs, if any were included in the corresponding access request\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequestAdminItemStatus\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n \n * @type {RequestedItemStatusForm}\n * @memberof AccessRequestAdminItemStatus\n /\n 'form'?: RequestedItemStatusForm;\n}\n\nexport const AccessRequestAdminItemStatusTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type AccessRequestAdminItemStatusTypeEnum = typeof AccessRequestAdminItemStatusTypeEnum[keyof typeof AccessRequestAdminItemStatusTypeEnum];\nexport const AccessRequestAdminItemStatusIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type AccessRequestAdminItemStatusIdentityTypeEnum = typeof AccessRequestAdminItemStatusIdentityTypeEnum[keyof typeof AccessRequestAdminItemStatusIdentityTypeEnum];\n\n/\n \n * @export\n * @interface AccessRequestConfig\n /\nexport interface AccessRequestConfig {\n /\n If this is true, approvals must be processed by an external system. Also, if this is true, it blocks Request Center access requests and returns an error for any user who isn\\'t an org admin.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'approvalsMustBeExternal'?: boolean;\n /\n If this is true and the requester and reviewer are the same, the request is automatically approved. This field has been moved to the approval configurations. Please use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint instead.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'autoApprovalEnabled'?: boolean;\n /\n If this is true, reauthorization will be enforced for appropriately configured access items. Enablement of this feature is currently in a limited state.\n * @type {boolean}\n * @memberof AccessRequestConfig\n /\n 'reauthorizationEnabled'?: boolean;\n /\n \n * @type {RequestOnBehalfOfConfig}\n * @memberof AccessRequestConfig\n /\n 'requestOnBehalfOfConfig'?: RequestOnBehalfOfConfig;\n /\n \n * @type {ApprovalReminderAndEscalationConfig}\n * @memberof AccessRequestConfig\n /\n 'approvalReminderAndEscalationConfig'?: ApprovalReminderAndEscalationConfig;\n /\n \n * @type {EntitlementRequestConfig}\n * @memberof AccessRequestConfig\n /\n 'entitlementRequestConfig'?: EntitlementRequestConfig;\n}\n/\n \n * @export\n * @interface AccessRequestConfig2\n /\nexport interface AccessRequestConfig2 {\n /\n If this is true, approvals must be processed by an external system. Also, if this is true, it blocks Request Center access requests and returns an error for any user who isn\\'t an org admin.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'approvalsMustBeExternal'?: boolean;\n /\n If this is true, reauthorization will be enforced for appropriately configured access items. Enablement of this feature is currently in a limited state.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'reauthorizationEnabled'?: boolean;\n /\n \n * @type {RequestOnBehalfOfConfig2}\n * @memberof AccessRequestConfig2\n /\n 'requestOnBehalfOfConfig'?: RequestOnBehalfOfConfig2;\n /\n \n * @type {EntitlementRequestConfig2}\n * @memberof AccessRequestConfig2\n /\n 'entitlementRequestConfig'?: EntitlementRequestConfig2;\n /\n If this is true, requesters and requested-for users will be able to see the names of governance group members when a request is awaiting the group\\'s approval. Up to the first 10 members of the group will be listed.\n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'govGroupVisibilityEnabled'?: boolean;\n /\n If this is false, machine identity access requests and machine accounts-selection are rejected with 403 (for example, \\\"Machine identity access request is disabled in access request configuration.\\\"). Defaults to true. Exposed on access-request-config v2 only. \n * @type {boolean}\n * @memberof AccessRequestConfig2\n /\n 'machineIdentityAccessRequestEnabled'?: boolean;\n}\n/\n \n * @export\n * @interface AccessRequestItem\n /\nexport interface AccessRequestItem {\n /\n The type of the item being requested.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'type': AccessRequestItemTypeEnum;\n /\n ID of Role, Access Profile or Entitlement being requested.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'id': string;\n /\n Comment provided by requester. * Comment is required when the request is of type Revoke Access. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'comment'?: string;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities and /access-request-status.\n * @type {{ [key: string]: string; }}\n * @memberof AccessRequestItem\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'startDate'?: string;\n /\n The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'removeDate'?: string;\n /\n The assignmentId for a specific role assignment on the identity. This id is used to revoke that specific roleAssignment on that identity. * For use with REVOKE_ACCESS requests for roles for identities with multiple accounts on a single source. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'assignmentId'?: string \| null;\n /\n The unique identifier for an account on the identity, designated as the account ID attribute in the source\\'s account schema. This is used to revoke a specific attributeAssignment on the identity. * For use with REVOKE_ACCESS requests for entitlements for identities with multiple accounts on a single source. \n * @type {string}\n * @memberof AccessRequestItem\n /\n 'nativeIdentity'?: string \| null;\n /\n Optional ID of a completed form instance for this line item. For human GRANT_ACCESS requests, include when the requested role, access profile, or entitlement has an associated `formDefinitionId` in its request configuration. An empty `formInstanceId` on a GRANT_ACCESS item is rejected with HTTP 400. Not used for REVOKE_ACCESS.\n * @type {string}\n * @memberof AccessRequestItem\n /\n 'formInstanceId'?: string \| null;\n}\n\nexport const AccessRequestItemTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type AccessRequestItemTypeEnum = typeof AccessRequestItemTypeEnum[keyof typeof AccessRequestItemTypeEnum];\n\n/\n Completed form instance associated with an access request item. Omitted when the item has no associated form or no form answers were captured. All listed properties may be present when form answers exist. Optional structural keys (`formElements`, `formConditions`, `formInstanceInputs`) may also be present; their shape follows the form instance payload.\n * @export\n * @interface AccessRequestItemForm\n /\nexport interface AccessRequestItemForm {\n [key: string]: any;\n\n /\n ID of the form definition that was completed for this item.\n * @type {string}\n * @memberof AccessRequestItemForm\n /\n 'formDefinitionId'?: string \| null;\n /\n ID of the completed form instance.\n * @type {string}\n * @memberof AccessRequestItemForm\n /\n 'formInstanceId'?: string \| null;\n /\n Key-value pairs (form field technical name to value) from the completed form instance.\n * @type {{ [key: string]: any; }}\n * @memberof AccessRequestItemForm\n /\n 'formData'?: { [key: string]: any; } \| null;\n /\n Optional form element definitions when present. Shape follows the form instance payload.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof AccessRequestItemForm\n /\n 'formElements'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional conditional display rules when present. Shape follows the form instance payload; do not depend on a fixed condition schema in this API.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof AccessRequestItemForm\n /\n 'formConditions'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional inputs passed into the form instance when present. Copied from the form instance payload as-is.\n * @type {{ [key: string]: any; }}\n * @memberof AccessRequestItemForm\n /\n 'formInstanceInputs'?: { [key: string]: any; } \| null;\n}\n/\n Provides additional details about this access request phase.\n * @export\n * @interface AccessRequestPhases\n /\nexport interface AccessRequestPhases {\n /\n The time that this phase started.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'started'?: string;\n /\n The time that this phase finished.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'finished'?: string \| null;\n /\n The name of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'name'?: string;\n /\n The state of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'state'?: AccessRequestPhasesStateEnum;\n /\n The state of this phase.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'result'?: AccessRequestPhasesResultEnum \| null;\n /\n A reference to another object on the RequestedItemStatus that contains more details about the phase. Note that for the Provisioning phase, this will be empty if there are no manual work items.\n * @type {string}\n * @memberof AccessRequestPhases\n /\n 'phaseReference'?: string \| null;\n}\n\nexport const AccessRequestPhasesStateEnum = {\n Pending: 'PENDING',\n Executing: 'EXECUTING',\n Completed: 'COMPLETED',\n Cancelled: 'CANCELLED',\n NotExecuted: 'NOT_EXECUTED'\n} as const;\n\nexport type AccessRequestPhasesStateEnum = typeof AccessRequestPhasesStateEnum[keyof typeof AccessRequestPhasesStateEnum];\nexport const AccessRequestPhasesResultEnum = {\n Successful: 'SUCCESSFUL',\n Failed: 'FAILED'\n} as const;\n\nexport type AccessRequestPhasesResultEnum = typeof AccessRequestPhasesResultEnum[keyof typeof AccessRequestPhasesResultEnum];\n\n/\n \n * @export\n * @interface AccessRequestResponse\n /\nexport interface AccessRequestResponse {\n /\n A list of new access request tracking data mapped to the values requested.\n * @type {Array<AccessRequestTracking>}\n * @memberof AccessRequestResponse\n /\n 'newRequests'?: Array<AccessRequestTracking>;\n /\n A list of existing access request tracking data mapped to the values requested. This indicates access has already been requested for this item.\n * @type {Array<AccessRequestTracking>}\n * @memberof AccessRequestResponse\n /\n 'existingRequests'?: Array<AccessRequestTracking>;\n}\n/\n \n * @export\n * @interface AccessRequestTracking\n /\nexport interface AccessRequestTracking {\n /\n The identity id in which the access request is for.\n * @type {string}\n * @memberof AccessRequestTracking\n /\n 'requestedFor'?: string;\n /\n The details of the item requested.\n * @type {Array<RequestedItemDetails>}\n * @memberof AccessRequestTracking\n /\n 'requestedItemsDetails'?: Array<RequestedItemDetails>;\n /\n a hash representation of the access requested, useful for longer term tracking client side.\n * @type {number}\n * @memberof AccessRequestTracking\n /\n 'attributesHash'?: number;\n /\n a list of access request identifiers, generally only one will be populated, but high volume requested may result in multiple ids.\n * @type {Array<string>}\n * @memberof AccessRequestTracking\n /\n 'accessRequestIds'?: Array<string>;\n}\n/\n Access request type. Defaults to GRANT_ACCESS. REVOKE_ACCESS type can only have a single Identity ID in the requestedFor field. MODIFY_ACCESS type is used for updating access expiration dates or other access modifications.\n * @export\n * @enum {string}\n /\n\nexport const AccessRequestType = {\n GrantAccess: 'GRANT_ACCESS',\n RevokeAccess: 'REVOKE_ACCESS',\n ModifyAccess: 'MODIFY_ACCESS'\n} as const;\n\nexport type AccessRequestType = typeof AccessRequestType[keyof typeof AccessRequestType];\n\n\n/\n \n * @export\n * @interface AccountInfoRef\n /\nexport interface AccountInfoRef {\n /\n The uuid for the account, available under the \\'objectguid\\' attribute\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'uuid'?: string;\n /\n The \\'distinguishedName\\' attribute for the account\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'nativeIdentity'?: string;\n /\n \n * @type {DtoType}\n * @memberof AccountInfoRef\n /\n 'type'?: DtoType;\n /\n The account id\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'id'?: string;\n /\n The account display name\n * @type {string}\n * @memberof AccountInfoRef\n /\n 'name'?: string;\n}\n\n\n/\n \n * @export\n * @interface AccountItemRef\n /\nexport interface AccountItemRef {\n /\n The uuid for the account on the source, available under the \\'objectguid\\' attribute * Corresponds to the account\\'s unique identifier as returned by accounts-selection or the accounts APIs. * For machine identity GRANT_ACCESS / MODIFY_ACCESS, provide `accountUuid` and/or `nativeIdentity`. Submitted values must match a real machine account for the requested machine identity on the selected source.\n * @type {string}\n * @memberof AccountItemRef\n /\n 'accountUuid'?: string \| null;\n /\n The \\'distinguishedName\\' attribute for the account. * For machine identity GRANT_ACCESS / MODIFY_ACCESS, provide `accountUuid` and/or `nativeIdentity`. Submitted values must match a real machine account for the requested machine identity on the selected source.\n * @type {string}\n * @memberof AccountItemRef\n /\n 'nativeIdentity'?: string;\n}\n/\n Prefetch account selections for an access request before submit. Machine identity accounts-selection must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry and only `ENTITLEMENT` items. Flat `requestedFor` / `requestedItems` must be omitted (do not send an empty array) for machine requests. \n * @export\n * @interface AccountsSelectionRequest\n /\nexport interface AccountsSelectionRequest {\n /\n A list of Identity IDs for whom the Access is requested. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems` (including all machine identity requests).\n * @type {Array<string>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedFor'?: Array<string>;\n /\n \n * @type {AccessRequestType}\n * @memberof AccountsSelectionRequest\n /\n 'requestType'?: AccessRequestType \| null;\n /\n Access items requested. * Must be omitted (do not send an empty array) when using `requestedForWithRequestedItems`. \n * @type {Array<AccessRequestItem>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedItems'?: Array<AccessRequestItem>;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities.\n * @type {{ [key: string]: string; }}\n * @memberof AccountsSelectionRequest\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n Nested payload pairing each identity with its requested items. * Required for machine identity accounts-selection. Set `identityType: MACHINE` on each entry. * Machine requests support `ENTITLEMENT` items only and do not allow mixed human and machine identities. * When present, `requestedFor` and `requestedItems` must be omitted (do not send an empty array).\n * @type {Array<RequestedForDtoRef>}\n * @memberof AccountsSelectionRequest\n /\n 'requestedForWithRequestedItems'?: Array<RequestedForDtoRef> \| null;\n}\n\n\n/\n \n * @export\n * @interface AccountsSelectionResponse\n /\nexport interface AccountsSelectionResponse {\n /\n A list of available account selections per identity in the request, for all the requested items\n * @type {Array<IdentityAccountSelections>}\n * @memberof AccountsSelectionResponse\n /\n 'identities'?: Array<IdentityAccountSelections>;\n}\n/\n \n * @export\n * @interface ApprovalForwardHistory\n /\nexport interface ApprovalForwardHistory {\n /\n Display name of approver from whom the approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'oldApproverName'?: string;\n /\n Display name of approver to whom the approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'newApproverName'?: string;\n /\n Comment made while forwarding.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'comment'?: string \| null;\n /\n Time at which approval was forwarded.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'modified'?: string;\n /\n Display name of forwarder who forwarded the approval.\n * @type {string}\n * @memberof ApprovalForwardHistory\n /\n 'forwarderName'?: string \| null;\n /\n \n * @type {ReassignmentType}\n * @memberof ApprovalForwardHistory\n /\n 'reassignmentType'?: ReassignmentType;\n}\n\n\n/\n Configuration for approval reminder and escalation behavior. Important: Modifying this object will override the sp-approval service\\'s reminderConfig and escalationConfig settings. Changes made here take precedence over any configuration set directly in the sp-approval service. \n * @export\n * @interface ApprovalReminderAndEscalationConfig\n /\nexport interface ApprovalReminderAndEscalationConfig {\n /\n Number of days to wait before the first reminder. If no reminders are configured, then this is the number of days to wait before escalation.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'daysUntilEscalation'?: number \| null;\n /\n Number of days to wait between reminder notifications.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'daysBetweenReminders'?: number \| null;\n /\n Maximum number of reminder notifications to send to the reviewer before approval escalation. The maximum allowed value is 20.\n * @type {number}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'maxReminders'?: number \| null;\n /\n \n * @type {IdentityReferenceWithNameAndEmail}\n * @memberof ApprovalReminderAndEscalationConfig\n /\n 'fallbackApproverRef'?: IdentityReferenceWithNameAndEmail \| null;\n}\n/\n Describes the individual or group that is responsible for an approval step.\n * @export\n * @enum {string}\n /\n\nexport const ApprovalScheme = {\n AppOwner: 'APP_OWNER',\n SourceOwner: 'SOURCE_OWNER',\n Manager: 'MANAGER',\n RoleOwner: 'ROLE_OWNER',\n AccessProfileOwner: 'ACCESS_PROFILE_OWNER',\n EntitlementOwner: 'ENTITLEMENT_OWNER',\n GovernanceGroup: 'GOVERNANCE_GROUP'\n} as const;\n\nexport type ApprovalScheme = typeof ApprovalScheme[keyof typeof ApprovalScheme];\n\n\n/\n \n * @export\n * @interface ApprovalStatusDto\n /\nexport interface ApprovalStatusDto {\n /\n True if the request for this item was forwarded from one owner to another.\n * @type {boolean}\n * @memberof ApprovalStatusDto\n /\n 'forwarded'?: boolean;\n /\n \n * @type {ApprovalStatusDtoOriginalOwner}\n * @memberof ApprovalStatusDto\n /\n 'originalOwner'?: ApprovalStatusDtoOriginalOwner;\n /\n \n * @type {ApprovalStatusDtoCurrentOwner}\n * @memberof ApprovalStatusDto\n /\n 'currentOwner'?: ApprovalStatusDtoCurrentOwner;\n /\n Time at which item was modified.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'modified'?: string \| null;\n /\n \n * @type {ManualWorkItemState}\n * @memberof ApprovalStatusDto\n /\n 'status'?: ManualWorkItemState;\n /\n \n * @type {ApprovalScheme}\n * @memberof ApprovalStatusDto\n /\n 'scheme'?: ApprovalScheme;\n /\n If the request failed, includes any error messages that were generated.\n * @type {Array<ErrorMessageDto>}\n * @memberof ApprovalStatusDto\n /\n 'errorMessages'?: Array<ErrorMessageDto> \| null;\n /\n Comment, if any, provided by the approver.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'comment'?: string \| null;\n /\n The date the role or access profile or entitlement is no longer assigned to the specified identity.\n * @type {string}\n * @memberof ApprovalStatusDto\n /\n 'removeDate'?: string \| null;\n}\n\n\n/\n \n * @export\n * @interface ApprovalStatusDtoCurrentOwner\n /\nexport interface ApprovalStatusDtoCurrentOwner {\n /\n DTO type of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'type'?: ApprovalStatusDtoCurrentOwnerTypeEnum;\n /\n ID of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'id'?: string;\n /\n Human-readable display name of identity who reviewed the access item request.\n * @type {string}\n * @memberof ApprovalStatusDtoCurrentOwner\n /\n 'name'?: string;\n}\n\nexport const ApprovalStatusDtoCurrentOwnerTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type ApprovalStatusDtoCurrentOwnerTypeEnum = typeof ApprovalStatusDtoCurrentOwnerTypeEnum[keyof typeof ApprovalStatusDtoCurrentOwnerTypeEnum];\n\n/\n Identity of orginal approval owner.\n * @export\n * @interface ApprovalStatusDtoOriginalOwner\n /\nexport interface ApprovalStatusDtoOriginalOwner {\n /\n DTO type of original approval owner\\'s identity.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'type'?: ApprovalStatusDtoOriginalOwnerTypeEnum;\n /\n ID of original approval owner\\'s identity.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'id'?: string;\n /\n Display name of original approval owner.\n * @type {string}\n * @memberof ApprovalStatusDtoOriginalOwner\n /\n 'name'?: string;\n}\n\nexport const ApprovalStatusDtoOriginalOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ApprovalStatusDtoOriginalOwnerTypeEnum = typeof ApprovalStatusDtoOriginalOwnerTypeEnum[keyof typeof ApprovalStatusDtoOriginalOwnerTypeEnum];\n\n/\n Request body payload for bulk approve access request endpoint.\n * @export\n * @interface BulkApproveAccessRequest\n /\nexport interface BulkApproveAccessRequest {\n /\n List of approval ids to approve the pending requests\n * @type {Array<string>}\n * @memberof BulkApproveAccessRequest\n /\n 'approvalIds': Array<string>;\n /\n Reason for approving the pending access request.\n * @type {string}\n * @memberof BulkApproveAccessRequest\n /\n 'comment': string;\n}\n/\n Request body payload for bulk cancel access request endpoint.\n * @export\n * @interface BulkCancelAccessRequest\n /\nexport interface BulkCancelAccessRequest {\n /\n List of access requests ids to cancel the pending requests\n * @type {Array<string>}\n * @memberof BulkCancelAccessRequest\n /\n 'accessRequestIds': Array<string>;\n /\n Reason for cancelling the pending access request.\n * @type {string}\n * @memberof BulkCancelAccessRequest\n /\n 'comment': string;\n}\n/\n Request body payload for cancel access request endpoint.\n * @export\n * @interface CancelAccessRequest\n /\nexport interface CancelAccessRequest {\n /\n This refers to the identityRequestId. To successfully cancel an access request, you must provide the identityRequestId.\n * @type {string}\n * @memberof CancelAccessRequest\n /\n 'accountActivityId': string;\n /\n Reason for cancelling the pending access request.\n * @type {string}\n * @memberof CancelAccessRequest\n /\n 'comment': string;\n}\n/\n Provides additional details for a request that has been cancelled.\n * @export\n * @interface CancelledRequestDetails\n /\nexport interface CancelledRequestDetails {\n /\n Comment made by the owner when cancelling the associated request.\n * @type {string}\n * @memberof CancelledRequestDetails\n /\n 'comment'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof CancelledRequestDetails\n /\n 'owner'?: OwnerDto;\n /\n Date comment was added by the owner when cancelling the associated request.\n * @type {string}\n * @memberof CancelledRequestDetails\n /\n 'modified'?: string;\n}\n/\n Request body payload for close access requests endpoint.\n * @export\n * @interface CloseAccessRequest\n /\nexport interface CloseAccessRequest {\n /\n Access Request IDs for the requests to be closed. Accepts 1-500 Identity Request IDs per request.\n * @type {Array<string>}\n * @memberof CloseAccessRequest\n /\n 'accessRequestIds': Array<string>;\n /\n Reason for closing the access request. Displayed under Warnings in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'message'?: string;\n /\n The request\\'s provisioning status. Displayed as Stage in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'executionStatus'?: CloseAccessRequestExecutionStatusEnum;\n /\n The request\\'s overall status. Displayed as Status in IdentityNow.\n * @type {string}\n * @memberof CloseAccessRequest\n /\n 'completionStatus'?: CloseAccessRequestCompletionStatusEnum;\n}\n\nexport const CloseAccessRequestExecutionStatusEnum = {\n Terminated: 'Terminated',\n Completed: 'Completed'\n} as const;\n\nexport type CloseAccessRequestExecutionStatusEnum = typeof CloseAccessRequestExecutionStatusEnum[keyof typeof CloseAccessRequestExecutionStatusEnum];\nexport const CloseAccessRequestCompletionStatusEnum = {\n Success: 'Success',\n Incomplete: 'Incomplete',\n Failure: 'Failure'\n} as const;\n\nexport type CloseAccessRequestCompletionStatusEnum = typeof CloseAccessRequestCompletionStatusEnum[keyof typeof CloseAccessRequestCompletionStatusEnum];\n\n/\n \n * @export\n * @interface CommentDto\n /\nexport interface CommentDto {\n /\n Comment content.\n * @type {string}\n * @memberof CommentDto\n /\n 'comment'?: string \| null;\n /\n Date and time comment was created.\n * @type {string}\n * @memberof CommentDto\n /\n 'created'?: string;\n /\n \n * @type {CommentDtoAuthor}\n * @memberof CommentDto\n /\n 'author'?: CommentDtoAuthor;\n}\n/\n Author of the comment\n * @export\n * @interface CommentDtoAuthor\n /\nexport interface CommentDtoAuthor {\n /\n The type of object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'type'?: CommentDtoAuthorTypeEnum;\n /\n The unique ID of the object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'id'?: string;\n /\n The display name of the object\n * @type {string}\n * @memberof CommentDtoAuthor\n /\n 'name'?: string;\n}\n\nexport const CommentDtoAuthorTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type CommentDtoAuthorTypeEnum = typeof CommentDtoAuthorTypeEnum[keyof typeof CommentDtoAuthorTypeEnum];\n\n/\n An enumeration of the types of DTOs supported within the IdentityNow infrastructure.\n * @export\n * @enum {string}\n /\n\nexport const DtoType = {\n AccountCorrelationConfig: 'ACCOUNT_CORRELATION_CONFIG',\n AccessProfile: 'ACCESS_PROFILE',\n AccessRequestApproval: 'ACCESS_REQUEST_APPROVAL',\n Account: 'ACCOUNT',\n Application: 'APPLICATION',\n Campaign: 'CAMPAIGN',\n CampaignFilter: 'CAMPAIGN_FILTER',\n Certification: 'CERTIFICATION',\n Cluster: 'CLUSTER',\n ConnectorSchema: 'CONNECTOR_SCHEMA',\n Entitlement: 'ENTITLEMENT',\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY',\n IdentityProfile: 'IDENTITY_PROFILE',\n IdentityRequest: 'IDENTITY_REQUEST',\n MachineIdentity: 'MACHINE_IDENTITY',\n LifecycleState: 'LIFECYCLE_STATE',\n PasswordPolicy: 'PASSWORD_POLICY',\n Role: 'ROLE',\n Rule: 'RULE',\n SodPolicy: 'SOD_POLICY',\n Source: 'SOURCE',\n Tag: 'TAG',\n TagCategory: 'TAG_CATEGORY',\n TaskResult: 'TASK_RESULT',\n ReportResult: 'REPORT_RESULT',\n SodViolation: 'SOD_VIOLATION',\n AccountActivity: 'ACCOUNT_ACTIVITY',\n Workgroup: 'WORKGROUP'\n} as const;\n\nexport type DtoType = typeof DtoType[keyof typeof DtoType];\n\n\n/\n \n * @export\n * @interface EntitlementAccessRequestConfig\n /\nexport interface EntitlementAccessRequestConfig {\n /\n Ordered list of approval steps for the access request. Empty when no approval is required.\n * @type {Array<EntitlementApprovalScheme>}\n * @memberof EntitlementAccessRequestConfig\n /\n 'approvalSchemes'?: Array<EntitlementApprovalScheme>;\n /\n If the requester must provide a comment during access request.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'requestCommentRequired'?: boolean;\n /\n If the reviewer must provide a comment when denying the access request.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'denialCommentRequired'?: boolean;\n /\n Is Reauthorization Required\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'reauthorizationRequired'?: boolean;\n /\n If true, then remove date or sunset date is required in access request of the entitlement.\n * @type {boolean}\n * @memberof EntitlementAccessRequestConfig\n /\n 'requireEndDate'?: boolean;\n /\n \n * @type {EntitlementAccessRequestConfigMaxPermittedAccessDuration}\n * @memberof EntitlementAccessRequestConfig\n /\n 'maxPermittedAccessDuration'?: EntitlementAccessRequestConfigMaxPermittedAccessDuration \| null;\n /\n The ID of the form definition used for the access request. If specified, the form is presented to the requester during the access request process.\n * @type {string}\n * @memberof EntitlementAccessRequestConfig\n /\n 'formDefinitionId'?: string \| null;\n}\n/\n The maximum duration for which the access is permitted.\n * @export\n * @interface EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\nexport interface EntitlementAccessRequestConfigMaxPermittedAccessDuration {\n /\n The numeric value of the duration.\n * @type {number}\n * @memberof EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\n 'value'?: number;\n /\n The time unit for the duration.\n * @type {string}\n * @memberof EntitlementAccessRequestConfigMaxPermittedAccessDuration\n /\n 'timeUnit'?: EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum;\n}\n\nexport const EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum = {\n Hours: 'HOURS',\n Days: 'DAYS',\n Weeks: 'WEEKS',\n Months: 'MONTHS'\n} as const;\n\nexport type EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum = typeof EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum[keyof typeof EntitlementAccessRequestConfigMaxPermittedAccessDurationTimeUnitEnum];\n\n/\n \n * @export\n * @interface EntitlementApprovalScheme\n /\nexport interface EntitlementApprovalScheme {\n /\n Describes the individual or group that is responsible for an approval step. Values are as follows. ENTITLEMENT_OWNER: Owner of the associated Entitlement SOURCE_OWNER: Owner of the associated Source MANAGER: Manager of the Identity for whom the request is being made GOVERNANCE_GROUP: A Governance Group, the ID of which is specified by the approverId field WORKFLOW: A Workflow, the ID of which is specified by the approverId field. A workflow approver has these requirements. - The Adaptive Approvals feature must be enabled for the tenant. - The workflow given in approverId must use the `idn:access-request-trigger` trigger. - `WORKFLOW` is exclusive of the other approver types. If you use it, it must be the only entry in approvalSchemes. - `WORKFLOW` is supported only in entitlement-level configuration. The source-level [Update source entitlement request configuration](https://developer.sailpoint.com/docs/api/update-source-entitlement-request-config-v-1) endpoint rejects it with a 400.\n * @type {string}\n * @memberof EntitlementApprovalScheme\n /\n 'approverType'?: EntitlementApprovalSchemeApproverTypeEnum;\n /\n Id of the specific approver, used only when approverType is GOVERNANCE_GROUP or WORKFLOW. For WORKFLOW this is the ID of the workflow to run.\n * @type {string}\n * @memberof EntitlementApprovalScheme\n /\n 'approverId'?: string \| null;\n}\n\nexport const EntitlementApprovalSchemeApproverTypeEnum = {\n EntitlementOwner: 'ENTITLEMENT_OWNER',\n SourceOwner: 'SOURCE_OWNER',\n Manager: 'MANAGER',\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Workflow: 'WORKFLOW'\n} as const;\n\nexport type EntitlementApprovalSchemeApproverTypeEnum = typeof EntitlementApprovalSchemeApproverTypeEnum[keyof typeof EntitlementApprovalSchemeApproverTypeEnum];\n\n/\n \n * @export\n * @interface EntitlementRequestConfig\n /\nexport interface EntitlementRequestConfig {\n /\n \n * @type {EntitlementAccessRequestConfig}\n * @memberof EntitlementRequestConfig\n /\n 'accessRequestConfig'?: EntitlementAccessRequestConfig;\n /\n \n * @type {EntitlementRevocationRequestConfig}\n * @memberof EntitlementRequestConfig\n /\n 'revocationRequestConfig'?: EntitlementRevocationRequestConfig;\n}\n/\n \n * @export\n * @interface EntitlementRequestConfig2\n /\nexport interface EntitlementRequestConfig2 {\n /\n \n * @type {EntitlementAccessRequestConfig}\n * @memberof EntitlementRequestConfig2\n /\n 'accessRequestConfig'?: EntitlementAccessRequestConfig;\n /\n \n * @type {EntitlementRevocationRequestConfig}\n * @memberof EntitlementRequestConfig2\n /\n 'revocationRequestConfig'?: EntitlementRevocationRequestConfig;\n}\n/\n \n * @export\n * @interface EntitlementRevocationRequestConfig\n /\nexport interface EntitlementRevocationRequestConfig {\n /\n Ordered list of approval steps for the revocation request. Empty when no approval is required.\n * @type {Array<EntitlementApprovalScheme>}\n * @memberof EntitlementRevocationRequestConfig\n /\n 'approvalSchemes'?: Array<EntitlementApprovalScheme>;\n}\n/\n A single JIT entitlement snapshot entry from the provisioning plan.\n * @export\n * @interface EntitlementStateSnapshotJitDetail\n /\nexport interface EntitlementStateSnapshotJitDetail {\n [key: string]: any;\n\n /\n Application id for the entitlement attribute (same as EntitlementStateSnapshot.applicationId).\n * @type {string}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'applicationId'?: string;\n /\n Account attribute name for the entitlement (EntitlementStateSnapshot.attributeName).\n * @type {string}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'attributeName'?: string;\n /\n Entitlement values for that attribute (EntitlementStateSnapshot.attributeValues).\n * @type {Array<string>}\n * @memberof EntitlementStateSnapshotJitDetail\n /\n 'attributeValues'?: Array<string>;\n}\n/\n \n * @export\n * @interface ErrorMessageDto\n /\nexport interface ErrorMessageDto {\n /\n The locale for the message text, a BCP 47 language tag.\n * @type {string}\n * @memberof ErrorMessageDto\n /\n 'locale'?: string \| null;\n /\n \n * @type {LocaleOrigin}\n * @memberof ErrorMessageDto\n /\n 'localeOrigin'?: LocaleOrigin \| null;\n /\n Actual text of the error message in the indicated locale.\n * @type {string}\n * @memberof ErrorMessageDto\n /\n 'text'?: string;\n}\n\n\n/\n \n * @export\n * @interface ErrorResponseDto\n /\nexport interface ErrorResponseDto {\n /\n Fine-grained error code providing more detail of the error.\n * @type {string}\n * @memberof ErrorResponseDto\n /\n 'detailCode'?: string;\n /\n Unique tracking id for the error.\n * @type {string}\n * @memberof ErrorResponseDto\n /\n 'trackingId'?: string;\n /\n Generic localized reason for error\n * @type {Array<ErrorMessageDto>}\n * @memberof ErrorResponseDto\n /\n 'messages'?: Array<ErrorMessageDto>;\n /\n Plain-text descriptive reasons to provide additional detail to the text provided in the messages field\n * @type {Array<ErrorMessageDto>}\n * @memberof ErrorResponseDto\n /\n 'causes'?: Array<ErrorMessageDto>;\n}\n/\n \n * @export\n * @interface GetAccessRequestConfigV1401Response\n /\nexport interface GetAccessRequestConfigV1401Response {\n /\n A message describing the error\n * @type {any}\n * @memberof GetAccessRequestConfigV1401Response\n /\n 'error'?: any;\n}\n/\n \n * @export\n * @interface GetAccessRequestConfigV1429Response\n /\nexport interface GetAccessRequestConfigV1429Response {\n /\n A message describing the error\n * @type {any}\n * @memberof GetAccessRequestConfigV1429Response\n /\n 'message'?: any;\n}\n/\n \n * @export\n * @interface IdentityAccountSelections\n /\nexport interface IdentityAccountSelections {\n /\n Available account selections for the identity, per requested item\n * @type {Array<RequestedItemAccountSelections>}\n * @memberof IdentityAccountSelections\n /\n 'requestedItems'?: Array<RequestedItemAccountSelections>;\n /\n A boolean indicating whether any account selections will be required for the user to raise an access request\n * @type {boolean}\n * @memberof IdentityAccountSelections\n /\n 'accountsSelectionRequired'?: boolean;\n /\n \n * @type {DtoType}\n * @memberof IdentityAccountSelections\n /\n 'type'?: DtoType;\n /\n The identity id for the requested-for identity. * `IDENTITY`: the human identity id. * `MACHINE_IDENTITY`: the machine identity id (not the correlated human identity). \n * @type {string}\n * @memberof IdentityAccountSelections\n /\n 'id'?: string;\n /\n The name of the identity\n * @type {string}\n * @memberof IdentityAccountSelections\n /\n 'name'?: string;\n}\n\n\n/\n \n * @export\n * @interface IdentityEntitlementDetails\n /\nexport interface IdentityEntitlementDetails {\n /\n Id of Identity\n * @type {string}\n * @memberof IdentityEntitlementDetails\n /\n 'identityId'?: string;\n /\n \n * @type {IdentityEntitlementDetailsEntitlementDto}\n * @memberof IdentityEntitlementDetails\n /\n 'entitlement'?: IdentityEntitlementDetailsEntitlementDto;\n /\n Id of Source\n * @type {string}\n * @memberof IdentityEntitlementDetails\n /\n 'sourceId'?: string;\n /\n A list of account targets on the identity provisioned with the requested entitlement.\n * @type {Array<IdentityEntitlementDetailsAccountTarget>}\n * @memberof IdentityEntitlementDetails\n /\n 'accountTargets'?: Array<IdentityEntitlementDetailsAccountTarget>;\n}\n/\n \n * @export\n * @interface IdentityEntitlementDetailsAccountTarget\n /\nexport interface IdentityEntitlementDetailsAccountTarget {\n /\n The id of account\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountId'?: string;\n /\n The name of account\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountName'?: string;\n /\n The UUID representation of the account if available\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'accountUUID'?: string \| null;\n /\n The id of Source\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'sourceId'?: string;\n /\n The name of Source\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'sourceName'?: string;\n /\n The removal date scheduled for the entitlement on the Identity\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'removeDate'?: string \| null;\n /\n The assignmentId of the entitlement on the Identity\n * @type {string}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'assignmentId'?: string \| null;\n /\n If the entitlement can be revoked\n * @type {boolean}\n * @memberof IdentityEntitlementDetailsAccountTarget\n /\n 'revocable'?: boolean;\n}\n/\n \n * @export\n * @interface IdentityEntitlementDetailsEntitlementDto\n /\nexport interface IdentityEntitlementDetailsEntitlementDto {\n /\n The entitlement id\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'id'?: string;\n /\n The entitlement name\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'name'?: string;\n /\n Time when the entitlement was last modified\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'created'?: string;\n /\n Time when the entitlement was last modified\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'modified'?: string;\n /\n The description of the entitlement\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'description'?: string \| null;\n /\n The type of the object, will always be \\\"ENTITLEMENT\\\"\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'type'?: string;\n /\n The source ID\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'sourceId'?: string;\n /\n The source name\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'sourceName'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'owner'?: OwnerDto;\n /\n The value of the entitlement\n * @type {string}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'value'?: string;\n /\n a list of properties informing the viewer about the entitlement\n * @type {Array<string>}\n * @memberof IdentityEntitlementDetailsEntitlementDto\n /\n 'flags'?: Array<string>;\n}\n/\n \n * @export\n * @interface IdentityReferenceWithNameAndEmail\n /\nexport interface IdentityReferenceWithNameAndEmail {\n /\n The type can only be IDENTITY. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'type'?: string;\n /\n Identity ID.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'id'?: string;\n /\n Identity\\'s human-readable display name. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'name'?: string;\n /\n Identity\\'s email address. This is read-only.\n * @type {string}\n * @memberof IdentityReferenceWithNameAndEmail\n /\n 'email'?: string \| null;\n}\n/\n An indicator of how the locale was selected. DEFAULT means the locale is the system default. REQUEST means the locale was selected from the request context (i.e., best match based on the Accept-Language header). Additional values may be added in the future without notice.\n * @export\n * @enum {string}\n /\n\nexport const LocaleOrigin = {\n Default: 'DEFAULT',\n Request: 'REQUEST'\n} as const;\n\nexport type LocaleOrigin = typeof LocaleOrigin[keyof typeof LocaleOrigin];\n\n\n/\n \n * @export\n * @interface ManualWorkItemDetails\n /\nexport interface ManualWorkItemDetails {\n /\n True if the request for this item was forwarded from one owner to another.\n * @type {boolean}\n * @memberof ManualWorkItemDetails\n /\n 'forwarded'?: boolean;\n /\n \n * @type {ManualWorkItemDetailsOriginalOwner}\n * @memberof ManualWorkItemDetails\n /\n 'originalOwner'?: ManualWorkItemDetailsOriginalOwner \| null;\n /\n \n * @type {ManualWorkItemDetailsCurrentOwner}\n * @memberof ManualWorkItemDetails\n /\n 'currentOwner'?: ManualWorkItemDetailsCurrentOwner \| null;\n /\n Time at which item was modified.\n * @type {string}\n * @memberof ManualWorkItemDetails\n /\n 'modified'?: string;\n /\n \n * @type {ManualWorkItemState}\n * @memberof ManualWorkItemDetails\n /\n 'status'?: ManualWorkItemState;\n /\n The history of approval forward action.\n * @type {Array<ApprovalForwardHistory>}\n * @memberof ManualWorkItemDetails\n /\n 'forwardHistory'?: Array<ApprovalForwardHistory> \| null;\n}\n\n\n/\n Identity of current work item owner.\n * @export\n * @interface ManualWorkItemDetailsCurrentOwner\n /\nexport interface ManualWorkItemDetailsCurrentOwner {\n /\n DTO type of current work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'type'?: ManualWorkItemDetailsCurrentOwnerTypeEnum;\n /\n ID of current work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'id'?: string;\n /\n Display name of current work item owner.\n * @type {string}\n * @memberof ManualWorkItemDetailsCurrentOwner\n /\n 'name'?: string;\n}\n\nexport const ManualWorkItemDetailsCurrentOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ManualWorkItemDetailsCurrentOwnerTypeEnum = typeof ManualWorkItemDetailsCurrentOwnerTypeEnum[keyof typeof ManualWorkItemDetailsCurrentOwnerTypeEnum];\n\n/\n Identity of original work item owner, if the work item has been forwarded.\n * @export\n * @interface ManualWorkItemDetailsOriginalOwner\n /\nexport interface ManualWorkItemDetailsOriginalOwner {\n /\n DTO type of original work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'type'?: ManualWorkItemDetailsOriginalOwnerTypeEnum;\n /\n ID of original work item owner\\'s identity.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'id'?: string;\n /\n Display name of original work item owner.\n * @type {string}\n * @memberof ManualWorkItemDetailsOriginalOwner\n /\n 'name'?: string;\n}\n\nexport const ManualWorkItemDetailsOriginalOwnerTypeEnum = {\n GovernanceGroup: 'GOVERNANCE_GROUP',\n Identity: 'IDENTITY'\n} as const;\n\nexport type ManualWorkItemDetailsOriginalOwnerTypeEnum = typeof ManualWorkItemDetailsOriginalOwnerTypeEnum[keyof typeof ManualWorkItemDetailsOriginalOwnerTypeEnum];\n\n/\n Indicates the state of the request processing for this item: * PENDING: The request for this item is awaiting processing. * APPROVED: The request for this item has been approved. * REJECTED: The request for this item was rejected. * EXPIRED: The request for this item expired with no action taken. * CANCELLED: The request for this item was cancelled with no user action. * ARCHIVED: The request for this item has been archived after completion.\n * @export\n * @enum {string}\n /\n\nexport const ManualWorkItemState = {\n Pending: 'PENDING',\n Approved: 'APPROVED',\n Rejected: 'REJECTED',\n Expired: 'EXPIRED',\n Cancelled: 'CANCELLED',\n Archived: 'ARCHIVED'\n} as const;\n\nexport type ManualWorkItemState = typeof ManualWorkItemState[keyof typeof ManualWorkItemState];\n\n\n/\n Owner\\'s identity.\n * @export\n * @interface OwnerDto\n /\nexport interface OwnerDto {\n /\n Owner\\'s DTO type.\n * @type {string}\n * @memberof OwnerDto\n /\n 'type'?: OwnerDtoTypeEnum;\n /\n Owner\\'s identity ID.\n * @type {string}\n * @memberof OwnerDto\n /\n 'id'?: string;\n /\n Owner\\'s name.\n * @type {string}\n * @memberof OwnerDto\n /\n 'name'?: string;\n}\n\nexport const OwnerDtoTypeEnum = {\n Identity: 'IDENTITY'\n} as const;\n\nexport type OwnerDtoTypeEnum = typeof OwnerDtoTypeEnum[keyof typeof OwnerDtoTypeEnum];\n\n/\n Provides additional details about the pre-approval trigger for this request.\n * @export\n * @interface PreApprovalTriggerDetails\n /\nexport interface PreApprovalTriggerDetails {\n /\n Comment left for the pre-approval decision\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'comment'?: string;\n /\n The reviewer of the pre-approval decision\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'reviewer'?: string;\n /\n The decision of the pre-approval trigger\n * @type {string}\n * @memberof PreApprovalTriggerDetails\n /\n 'decision'?: PreApprovalTriggerDetailsDecisionEnum;\n}\n\nexport const PreApprovalTriggerDetailsDecisionEnum = {\n Approved: 'APPROVED',\n Rejected: 'REJECTED'\n} as const;\n\nexport type PreApprovalTriggerDetailsDecisionEnum = typeof PreApprovalTriggerDetailsDecisionEnum[keyof typeof PreApprovalTriggerDetailsDecisionEnum];\n\n/\n Provides additional details about provisioning for this request.\n * @export\n * @interface ProvisioningDetails\n /\nexport interface ProvisioningDetails {\n /\n Ordered CSV of sub phase references to objects that contain more information about provisioning. For example, this can contain \\\"manualWorkItemDetails\\\" which indicate that there is further information in that object for this phase.\n * @type {string}\n * @memberof ProvisioningDetails\n /\n 'orderedSubPhaseReferences'?: string;\n}\n/\n The approval reassignment type. * MANUAL_REASSIGNMENT: An approval with this reassignment type has been specifically reassigned by the approval task\\'s owner, from their queue to someone else\\'s. * AUTOMATIC_REASSIGNMENT: An approval with this reassignment type has been automatically reassigned from another approver\\'s queue, according to that approver\\'s reassignment configuration. The approver\\'s reassignment configuration may be set up to automatically reassign approval tasks for a defined (or possibly open-ended) period of time. * AUTO_ESCALATION: An approval with this reassignment type has been automatically reassigned from another approver\\'s queue, according to the request\\'s escalation configuration. For more information about escalation configuration, refer to [Setting Global Reminders and Escalation Policies](https://documentation.sailpoint.com/saas/help/requests/config_emails.html). * SELF_REVIEW_DELEGATION: An approval with this reassignment type has been automatically reassigned by the system to prevent self-review. This helps prevent situations like a requester being tasked with approving their own request. For more information about preventing self-review, refer to [Self-review Prevention](https://documentation.sailpoint.com/saas/help/users/work_reassignment.html#self-review-prevention) and [Preventing Self-approval](https://documentation.sailpoint.com/saas/help/requests/config_ap_roles.html#preventing-self-approval).\n * @export\n * @enum {string}\n /\n\nexport const ReassignmentType = {\n ManualReassignment: 'MANUAL_REASSIGNMENT',\n AutomaticReassignment: 'AUTOMATIC_REASSIGNMENT',\n AutoEscalation: 'AUTO_ESCALATION',\n SelfReviewDelegation: 'SELF_REVIEW_DELEGATION'\n} as const;\n\nexport type ReassignmentType = typeof ReassignmentType[keyof typeof ReassignmentType];\n\n\n/\n \n * @export\n * @interface RequestOnBehalfOfConfig\n /\nexport interface RequestOnBehalfOfConfig {\n /\n If this is true, anyone can request access for anyone.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfAnyoneByAnyone'?: boolean;\n /\n If this is true, a manager can request access for his or her direct reports.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfEmployeeByManager'?: boolean;\n /\n If this is true, anyone can request access on behalf of machine identities. Machine access request authorization is evaluated as follows: 1. If this flag is true, any requester is allowed. 2. Else if `allowRequestForMachineByOwner` is true, the requester must be an admin or a primary/secondary owner of every requested machine identity. 3. Else admins are still allowed; non-admins receive 403. \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestOnBehalfOfForMachineIdentity'?: boolean;\n /\n When `allowRequestOnBehalfOfForMachineIdentity` is false and this flag is true, only admins and primary/secondary owners of the requested machine identities may submit machine access requests. Defaults to false (opt-in). \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig\n /\n 'allowRequestForMachineByOwner'?: boolean;\n}\n/\n \n * @export\n * @interface RequestOnBehalfOfConfig2\n /\nexport interface RequestOnBehalfOfConfig2 {\n /\n If this is true, anyone can request access for anyone.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfAnyoneByAnyone'?: boolean;\n /\n If this is true, a manager can request access for his or her direct reports.\n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfEmployeeByManager'?: boolean;\n /\n If this is true, anyone can request access on behalf of machine identities. Machine access request authorization is evaluated as follows: 1. If this flag is true, any requester is allowed. 2. Else if `allowRequestForMachineByOwner` is true, the requester must be an admin or a primary/secondary owner of every requested machine identity. 3. Else admins are still allowed; non-admins receive 403. \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestOnBehalfOfForMachineIdentity'?: boolean;\n /\n When `allowRequestOnBehalfOfForMachineIdentity` is false and this flag is true, only admins and primary/secondary owners of the requested machine identities may submit machine access requests. Defaults to false (opt-in). \n * @type {boolean}\n * @memberof RequestOnBehalfOfConfig2\n /\n 'allowRequestForMachineByOwner'?: boolean;\n}\n/\n \n * @export\n * @interface RequestedAccountRef\n /\nexport interface RequestedAccountRef {\n /\n Display name of the account for the user\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'name'?: string;\n /\n \n * @type {DtoType}\n * @memberof RequestedAccountRef\n /\n 'type'?: DtoType;\n /\n The uuid for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'accountUuid'?: string \| null;\n /\n The native identity for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'accountId'?: string \| null;\n /\n Display name of the source for the account\n * @type {string}\n * @memberof RequestedAccountRef\n /\n 'sourceName'?: string;\n}\n\n\n/\n \n * @export\n * @interface RequestedForDtoRef\n /\nexport interface RequestedForDtoRef {\n /\n The identity id the access is requested for. * `HUMAN` (default): the human identity id. * `MACHINE`: the machine identity id (hyphenated RFC-4122 UUID, not the correlated human identity). \n * @type {string}\n * @memberof RequestedForDtoRef\n /\n 'identityId': string;\n /\n Type of identity the access is requested for. * `HUMAN` (default) - standard human identity access request. * `MACHINE` - machine identity access request. When `MACHINE`, all entries in the request must also be `MACHINE` (mixed human and machine identities in one request are not supported), and only `ENTITLEMENT` items are allowed. \n * @type {string}\n * @memberof RequestedForDtoRef\n /\n 'identityType'?: RequestedForDtoRefIdentityTypeEnum;\n /\n the details for the access items that are requested for the identity\n * @type {Array<RequestedItemDtoRef>}\n * @memberof RequestedForDtoRef\n /\n 'requestedItems': Array<RequestedItemDtoRef>;\n}\n\nexport const RequestedForDtoRefIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type RequestedForDtoRefIdentityTypeEnum = typeof RequestedForDtoRefIdentityTypeEnum[keyof typeof RequestedForDtoRefIdentityTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemAccountSelections\n /\nexport interface RequestedItemAccountSelections {\n /\n The description for this requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'description'?: string;\n /\n This field indicates if account selections are not allowed for this requested item. * If true, this field indicates that account selections will not be available for this item and identity combination. In this case, no account selections should be provided in the access request for this item and identity combination, irrespective of whether the identity has single or multiple accounts on a source. * An example is where a user is requesting an access profile that is already assigned to one of their accounts. * For machine identities, this can be true with reason `NO_ACCOUNT_ON_SOURCE` when the machine has no account on a requested source. Empty `sources[].accounts` on the accounts-selection response is valid in that blocked case; submitting empty accounts on create is not valid. \n * @type {boolean}\n * @memberof RequestedItemAccountSelections\n /\n 'accountsSelectionBlocked'?: boolean;\n /\n If account selections are not allowed for an item, this field will denote the reason. * `ACCESS_PROFILE_ALREADY_ASSIGNED_TO_AN_ACCOUNT` - access profile already assigned on an account. * `NO_ACCOUNT_ON_SOURCE` - no account found on at least one requested source (only for machine identities). \n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'accountsSelectionBlockedReason'?: string \| null;\n /\n The type of the item being requested.\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'type'?: RequestedItemAccountSelectionsTypeEnum;\n /\n The id of the requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'id'?: string;\n /\n The name of the requested item\n * @type {string}\n * @memberof RequestedItemAccountSelections\n /\n 'name'?: string;\n /\n The details for the sources and accounts for the requested item and identity combination\n * @type {Array<SourceAccountSelections>}\n * @memberof RequestedItemAccountSelections\n /\n 'sources'?: Array<SourceAccountSelections>;\n}\n\nexport const RequestedItemAccountSelectionsTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemAccountSelectionsTypeEnum = typeof RequestedItemAccountSelectionsTypeEnum[keyof typeof RequestedItemAccountSelectionsTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemDetails\n /\nexport interface RequestedItemDetails {\n /\n The type of access item requested.\n * @type {string}\n * @memberof RequestedItemDetails\n /\n 'type'?: RequestedItemDetailsTypeEnum;\n /\n The id of the access item requested.\n * @type {string}\n * @memberof RequestedItemDetails\n /\n 'id'?: string;\n}\n\nexport const RequestedItemDetailsTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Entitlement: 'ENTITLEMENT',\n Role: 'ROLE'\n} as const;\n\nexport type RequestedItemDetailsTypeEnum = typeof RequestedItemDetailsTypeEnum[keyof typeof RequestedItemDetailsTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemDtoRef\n /\nexport interface RequestedItemDtoRef {\n /\n The type of the item being requested. * Machine identity access requests support `ENTITLEMENT` only. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'type': RequestedItemDtoRefTypeEnum;\n /\n ID of Role, Access Profile or Entitlement being requested.\n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'id': string;\n /\n Comment provided by requester. * Comment is required when the request is of type Revoke Access. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'comment'?: string;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities and /access-request-status.\n * @type {{ [key: string]: string; }}\n * @memberof RequestedItemDtoRef\n /\n 'clientMetadata'?: { [key: string]: string; };\n /\n The date and time the role or access profile or entitlement is/will be provisioned to the specified identity. Also known as the sunrise date. * Specify a date-time in the future. * This date-time can be used to indicate date-time when access item will be provisioned on the identity account. A GRANT_ACCESS request can use startDate to specify when to schedule provisioning of access item for an identity/account & a MODIFY_ACCESS request can use startDate to change the provisioning date-time of already assigned access item. But REVOKE_ACCESS request can not have startDate field. You can change the sunrise date in requests for yourself or others you are authorized to request for. * If the startDate is in the past, then the provisioning will be processed as soon as possible, but no guarantees can be made about when the provisioning will occur. If the startDate is in the future, then the provisioning will be scheduled to occur on that date and time. If no startDate is provided, then the provisioning will be processed as soon as possible. * For machine identity MODIFY_ACCESS, each requested item must include `startDate` and/or `removeDate`. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'startDate'?: string;\n /\n The date and time the role or access profile or entitlement is no longer assigned to the specified identity. Also known as the expiration date. * Specify a date-time in the future. * The current SLA for the deprovisioning is 24 hours. * This date-time can be used to change the duration of an existing access item assignment for the specified identity. A GRANT_ACCESS request can extend duration or even remove an expiration date, and either a GRANT_ACCESS or REVOKE_ACCESS request can reduce duration or add an expiration date where one has not previously been present. You can change the expiration date in requests for yourself or others you are authorized to request for. * For machine identity MODIFY_ACCESS, each requested item must include `startDate` and/or `removeDate`. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'removeDate'?: string;\n /\n The accounts where the access item will be provisioned to. * Includes selections performed by the user in the event of multiple accounts existing on the same source. * Also includes details for sources where user only has one account. * For machine identity GRANT_ACCESS and MODIFY_ACCESS: required. Provide exactly one source entry and exactly one account on that source. `accountUuid` and/or `nativeIdentity` must match a real machine account for the requested machine identity on that source. Prefer values returned by the accounts-selection API. * For machine identity REVOKE_ACCESS: not supported. Use `nativeIdentity` on the item instead. \n * @type {Array<SourceItemRef>}\n * @memberof RequestedItemDtoRef\n /\n 'accountSelection'?: Array<SourceItemRef> \| null;\n /\n The unique identifier for an account on the identity, designated as the account ID attribute in the source\\'s account schema. * For machine identity REVOKE_ACCESS: required per entitlement item (or auto-resolved when the machine has exactly one account on the entitlement source). Must match a machine account on that source. Do not send `accountSelection` on machine revoke. Human REVOKE_ACCESS cannot use this nested item schema; use flat `requestedItems` instead. \n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'nativeIdentity'?: string \| null;\n /\n Optional ID of a completed form instance for this line item. * For human GRANT_ACCESS: include when the requested role, access profile, or entitlement has an associated `formDefinitionId` in its request configuration. An empty `formInstanceId` on a GRANT_ACCESS item is rejected with HTTP 400. * Not supported for machine identity access requests.\n * @type {string}\n * @memberof RequestedItemDtoRef\n /\n 'formInstanceId'?: string \| null;\n}\n\nexport const RequestedItemDtoRefTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemDtoRefTypeEnum = typeof RequestedItemDtoRefTypeEnum[keyof typeof RequestedItemDtoRefTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatus\n /\nexport interface RequestedItemStatus {\n /\n The ID of the access request. As of 2025, this is a new property. Older access requests might not have an ID.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'id'?: string \| null;\n /\n Human-readable display name of the item being requested.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'name'?: string \| null;\n /\n Type of requested object.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'type'?: RequestedItemStatusTypeEnum \| null;\n /\n \n * @type {RequestedItemStatusCancelledRequestDetails}\n * @memberof RequestedItemStatus\n /\n 'cancelledRequestDetails'?: RequestedItemStatusCancelledRequestDetails;\n /\n List of list of localized error messages, if any, encountered during the approval/provisioning process.\n * @type {Array<Array<ErrorMessageDto>>}\n * @memberof RequestedItemStatus\n /\n 'errorMessages'?: Array<Array<ErrorMessageDto>> \| null;\n /\n \n * @type {RequestedItemStatusRequestState}\n * @memberof RequestedItemStatus\n /\n 'state'?: RequestedItemStatusRequestState;\n /\n Approval details for each item.\n * @type {Array<ApprovalStatusDto>}\n * @memberof RequestedItemStatus\n /\n 'approvalDetails'?: Array<ApprovalStatusDto>;\n /\n List of approval IDs associated with the request.\n * @type {Array<string>}\n * @memberof RequestedItemStatus\n /\n 'approvalIds'?: Array<string> \| null;\n /\n Manual work items created for provisioning the item.\n * @type {Array<ManualWorkItemDetails>}\n * @memberof RequestedItemStatus\n /\n 'manualWorkItemDetails'?: Array<ManualWorkItemDetails> \| null;\n /\n Id of associated account activity item.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'accountActivityItemId'?: string;\n /\n \n * @type {AccessRequestType}\n * @memberof RequestedItemStatus\n /\n 'requestType'?: AccessRequestType \| null;\n /\n When the request was last modified.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'modified'?: string \| null;\n /\n When the request was created.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'created'?: string;\n /\n \n * @type {AccessItemRequester}\n * @memberof RequestedItemStatus\n /\n 'requester'?: AccessItemRequester;\n /\n \n * @type {RequestedItemStatusRequestedFor}\n * @memberof RequestedItemStatus\n /\n 'requestedFor'?: RequestedItemStatusRequestedFor;\n /\n Type of identity the access was requested for. Legacy requests without a stored identity type are returned as `HUMAN`. \n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'identityType'?: RequestedItemStatusIdentityTypeEnum;\n /\n \n * @type {RequestedItemStatusRequesterComment}\n * @memberof RequestedItemStatus\n /\n 'requesterComment'?: RequestedItemStatusRequesterComment;\n /\n \n * @type {RequestedItemStatusSodViolationContext}\n * @memberof RequestedItemStatus\n /\n 'sodViolationContext'?: RequestedItemStatusSodViolationContext;\n /\n \n * @type {RequestedItemStatusProvisioningDetails}\n * @memberof RequestedItemStatus\n /\n 'provisioningDetails'?: RequestedItemStatusProvisioningDetails;\n /\n \n * @type {RequestedItemStatusPreApprovalTriggerDetails}\n * @memberof RequestedItemStatus\n /\n 'preApprovalTriggerDetails'?: RequestedItemStatusPreApprovalTriggerDetails;\n /\n A list of Phases that the Access Request has gone through in order, to help determine the status of the request.\n * @type {Array<AccessRequestPhases>}\n * @memberof RequestedItemStatus\n /\n 'accessRequestPhases'?: Array<AccessRequestPhases> \| null;\n /\n Description associated to the requested object.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'description'?: string \| null;\n /\n When the role access is scheduled for provisioning.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'startDate'?: string \| null;\n /\n When the role access is scheduled for removal.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'removeDate'?: string \| null;\n /\n True if the request can be canceled.\n * @type {boolean}\n * @memberof RequestedItemStatus\n /\n 'cancelable'?: boolean;\n /\n This is the account activity id.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'accessRequestId'?: string;\n /\n Arbitrary key-value pairs, if any were included in the corresponding access request\n * @type {{ [key: string]: string; }}\n * @memberof RequestedItemStatus\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n The accounts selected for the access to be provisioned on, in case the requested-for identity has multiple accounts on one or more sources.\n * @type {Array<RequestedAccountRef>}\n * @memberof RequestedItemStatus\n /\n 'requestedAccounts'?: Array<RequestedAccountRef> \| null;\n /\n The privilege level of the requested access item, if applicable.\n * @type {string}\n * @memberof RequestedItemStatus\n /\n 'privilegeLevel'?: string \| null;\n /\n JIT (Just-In-Time) details for the requested access item, if applicable.\n * @type {Array<EntitlementStateSnapshotJitDetail>}\n * @memberof RequestedItemStatus\n /\n 'jitDetails'?: Array<EntitlementStateSnapshotJitDetail> \| null;\n /\n \n * @type {RequestedItemStatusForm}\n * @memberof RequestedItemStatus\n /\n 'form'?: RequestedItemStatusForm;\n}\n\nexport const RequestedItemStatusTypeEnum = {\n AccessProfile: 'ACCESS_PROFILE',\n Role: 'ROLE',\n Entitlement: 'ENTITLEMENT'\n} as const;\n\nexport type RequestedItemStatusTypeEnum = typeof RequestedItemStatusTypeEnum[keyof typeof RequestedItemStatusTypeEnum];\nexport const RequestedItemStatusIdentityTypeEnum = {\n Human: 'HUMAN',\n Machine: 'MACHINE'\n} as const;\n\nexport type RequestedItemStatusIdentityTypeEnum = typeof RequestedItemStatusIdentityTypeEnum[keyof typeof RequestedItemStatusIdentityTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusCancelledRequestDetails\n /\nexport interface RequestedItemStatusCancelledRequestDetails {\n /\n Comment made by the owner when cancelling the associated request.\n * @type {string}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'comment'?: string;\n /\n \n * @type {OwnerDto}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'owner'?: OwnerDto;\n /\n Date comment was added by the owner when cancelling the associated request.\n * @type {string}\n * @memberof RequestedItemStatusCancelledRequestDetails\n /\n 'modified'?: string;\n}\n/\n \n * @export\n * @interface RequestedItemStatusForm\n /\nexport interface RequestedItemStatusForm {\n /\n ID of the form definition that was completed for this item.\n * @type {string}\n * @memberof RequestedItemStatusForm\n /\n 'formDefinitionId'?: string \| null;\n /\n ID of the completed form instance.\n * @type {string}\n * @memberof RequestedItemStatusForm\n /\n 'formInstanceId'?: string \| null;\n /\n Key-value pairs (form field technical name to value) from the completed form instance.\n * @type {{ [key: string]: any; }}\n * @memberof RequestedItemStatusForm\n /\n 'formData'?: { [key: string]: any; } \| null;\n /\n Optional form element definitions when present. Shape follows the form instance payload.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof RequestedItemStatusForm\n /\n 'formElements'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional conditional display rules when present. Shape follows the form instance payload; do not depend on a fixed condition schema in this API.\n * @type {Array<{ [key: string]: any; }>}\n * @memberof RequestedItemStatusForm\n /\n 'formConditions'?: Array<{ [key: string]: any; }> \| null;\n /\n Optional inputs passed into the form instance when present. Copied from the form instance payload as-is.\n * @type {{ [key: string]: any; }}\n * @memberof RequestedItemStatusForm\n /\n 'formInstanceInputs'?: { [key: string]: any; } \| null;\n}\n/\n \n * @export\n * @interface RequestedItemStatusPreApprovalTriggerDetails\n /\nexport interface RequestedItemStatusPreApprovalTriggerDetails {\n /\n Comment left for the pre-approval decision\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'comment'?: string;\n /\n The reviewer of the pre-approval decision\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'reviewer'?: string;\n /\n The decision of the pre-approval trigger\n * @type {string}\n * @memberof RequestedItemStatusPreApprovalTriggerDetails\n /\n 'decision'?: RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum;\n}\n\nexport const RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum = {\n Approved: 'APPROVED',\n Rejected: 'REJECTED'\n} as const;\n\nexport type RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum = typeof RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum[keyof typeof RequestedItemStatusPreApprovalTriggerDetailsDecisionEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusProvisioningDetails\n /\nexport interface RequestedItemStatusProvisioningDetails {\n /\n Ordered CSV of sub phase references to objects that contain more information about provisioning. For example, this can contain \\\"manualWorkItemDetails\\\" which indicate that there is further information in that object for this phase.\n * @type {string}\n * @memberof RequestedItemStatusProvisioningDetails\n /\n 'orderedSubPhaseReferences'?: string;\n}\n/\n Indicates the state of an access request: * EXECUTING: The request is executing, which indicates the system is doing some processing. * REQUEST_COMPLETED: Indicates the request has been completed. * CANCELLED: The request was cancelled with no user input. * TERMINATED: The request has been terminated before it was able to complete. * PROVISIONING_VERIFICATION_PENDING: The request has finished any approval steps and provisioning is waiting to be verified. * REJECTED: The request was rejected. * PROVISIONING_FAILED: The request has failed to complete. * NOT_ALL_ITEMS_PROVISIONED: One or more of the requested items failed to complete, but there were one or more successes. * ERROR: An error occurred during request processing.\n * @export\n * @enum {string}\n /\n\nexport const RequestedItemStatusRequestState = {\n Executing: 'EXECUTING',\n RequestCompleted: 'REQUEST_COMPLETED',\n Cancelled: 'CANCELLED',\n Terminated: 'TERMINATED',\n ProvisioningVerificationPending: 'PROVISIONING_VERIFICATION_PENDING',\n Rejected: 'REJECTED',\n ProvisioningFailed: 'PROVISIONING_FAILED',\n NotAllItemsProvisioned: 'NOT_ALL_ITEMS_PROVISIONED',\n Error: 'ERROR'\n} as const;\n\nexport type RequestedItemStatusRequestState = typeof RequestedItemStatusRequestState[keyof typeof RequestedItemStatusRequestState];\n\n\n/\n Identity access was requested for. For machine identity requests, `type` is `MACHINE_IDENTITY` and `id` is the machine identity id.\n * @export\n * @interface RequestedItemStatusRequestedFor\n /\nexport interface RequestedItemStatusRequestedFor {\n /\n Type of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'type'?: RequestedItemStatusRequestedForTypeEnum;\n /\n ID of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'id'?: string;\n /\n Human-readable display name of the object to which this reference applies\n * @type {string}\n * @memberof RequestedItemStatusRequestedFor\n /\n 'name'?: string;\n}\n\nexport const RequestedItemStatusRequestedForTypeEnum = {\n Identity: 'IDENTITY',\n MachineIdentity: 'MACHINE_IDENTITY'\n} as const;\n\nexport type RequestedItemStatusRequestedForTypeEnum = typeof RequestedItemStatusRequestedForTypeEnum[keyof typeof RequestedItemStatusRequestedForTypeEnum];\n\n/\n \n * @export\n * @interface RequestedItemStatusRequesterComment\n /\nexport interface RequestedItemStatusRequesterComment {\n /\n Comment content.\n * @type {string}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'comment'?: string \| null;\n /\n Date and time comment was created.\n * @type {string}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'created'?: string;\n /\n \n * @type {CommentDtoAuthor}\n * @memberof RequestedItemStatusRequesterComment\n /\n 'author'?: CommentDtoAuthor;\n}\n/\n \n * @export\n * @interface RequestedItemStatusSodViolationContext\n /\nexport interface RequestedItemStatusSodViolationContext {\n /\n The status of SOD violation check\n * @type {string}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'state'?: RequestedItemStatusSodViolationContextStateEnum \| null;\n /\n The id of the Violation check event\n * @type {string}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'uuid'?: string \| null;\n /\n \n * @type {SodViolationCheckResult}\n * @memberof RequestedItemStatusSodViolationContext\n /\n 'violationCheckResult'?: SodViolationCheckResult;\n}\n\nexport const RequestedItemStatusSodViolationContextStateEnum = {\n Success: 'SUCCESS',\n Error: 'ERROR'\n} as const;\n\nexport type RequestedItemStatusSodViolationContextStateEnum = typeof RequestedItemStatusSodViolationContextStateEnum[keyof typeof RequestedItemStatusSodViolationContextStateEnum];\n\n/\n Details of the Entitlement criteria\n * @export\n * @interface SodExemptCriteria\n /\nexport interface SodExemptCriteria {\n /\n If the entitlement already belonged to the user or not.\n * @type {boolean}\n * @memberof SodExemptCriteria\n /\n 'existing'?: boolean;\n /\n \n * @type {DtoType}\n * @memberof SodExemptCriteria\n /\n 'type'?: DtoType;\n /\n Entitlement ID\n * @type {string}\n * @memberof SodExemptCriteria\n /\n 'id'?: string;\n /\n Entitlement name\n * @type {string}\n * @memberof SodExemptCriteria\n /\n 'name'?: string;\n}\n\n\n/\n SOD policy.\n * @export\n * @interface SodPolicyDto\n /\nexport interface SodPolicyDto {\n /\n SOD policy DTO type.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'type'?: SodPolicyDtoTypeEnum;\n /\n SOD policy ID.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'id'?: string;\n /\n SOD policy display name.\n * @type {string}\n * @memberof SodPolicyDto\n /\n 'name'?: string;\n}\n\nexport const SodPolicyDtoTypeEnum = {\n SodPolicy: 'SOD_POLICY'\n} as const;\n\nexport type SodPolicyDtoTypeEnum = typeof SodPolicyDtoTypeEnum[keyof typeof SodPolicyDtoTypeEnum];\n\n/\n The inner object representing the completed SOD Violation check\n * @export\n * @interface SodViolationCheckResult\n /\nexport interface SodViolationCheckResult {\n /\n \n * @type {ErrorMessageDto}\n * @memberof SodViolationCheckResult\n /\n 'message'?: ErrorMessageDto;\n /\n Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on completion of the violation check.\n * @type {{ [key: string]: string; }}\n * @memberof SodViolationCheckResult\n /\n 'clientMetadata'?: { [key: string]: string; } \| null;\n /\n \n * @type {Array<SodViolationContext>}\n * @memberof SodViolationCheckResult\n /\n 'violationContexts'?: Array<SodViolationContext> \| null;\n /\n A list of the SOD policies that were violated.\n * @type {Array<SodPolicyDto>}\n * @memberof SodViolationCheckResult\n /\n 'violatedPolicies'?: Array<SodPolicyDto> \| null;\n}\n/\n The contextual information of the violated criteria\n * @export\n * @interface SodViolationContext\n /\nexport interface SodViolationContext {\n /\n \n * @type {SodPolicyDto}\n * @memberof SodViolationContext\n /\n 'policy'?: SodPolicyDto;\n /\n \n * @type {SodViolationContextConflictingAccessCriteria}\n * @memberof SodViolationContext\n /\n 'conflictingAccessCriteria'?: SodViolationContextConflictingAccessCriteria;\n}\n/\n An object referencing a completed SOD violation check\n * @export\n * @interface SodViolationContextCheckCompleted\n /\nexport interface SodViolationContextCheckCompleted {\n /\n The status of SOD violation check\n * @type {string}\n * @memberof SodViolationContextCheckCompleted\n /\n 'state'?: SodViolationContextCheckCompletedStateEnum \| null;\n /\n The id of the Violation check event\n * @type {string}\n * @memberof SodViolationContextCheckCompleted\n /\n 'uuid'?: string \| null;\n /\n \n * @type {SodViolationCheckResult}\n * @memberof SodViolationContextCheckCompleted\n /\n 'violationCheckResult'?: SodViolationCheckResult;\n}\n\nexport const SodViolationContextCheckCompletedStateEnum = {\n Success: 'SUCCESS',\n Error: 'ERROR'\n} as const;\n\nexport type SodViolationContextCheckCompletedStateEnum = typeof SodViolationContextCheckCompletedStateEnum[keyof typeof SodViolationContextCheckCompletedStateEnum];\n\n/\n The object which contains the left and right hand side of the entitlements that got violated according to the policy.\n * @export\n * @interface SodViolationContextConflictingAccessCriteria\n /\nexport interface SodViolationContextConflictingAccessCriteria {\n /\n \n * @type {SodViolationContextConflictingAccessCriteriaLeftCriteria}\n * @memberof SodViolationContextConflictingAccessCriteria\n /\n 'leftCriteria'?: SodViolationContextConflictingAccessCriteriaLeftCriteria;\n /\n \n * @type {SodViolationContextConflictingAccessCriteriaLeftCriteria}\n * @memberof SodViolationContextConflictingAccessCriteria\n /\n 'rightCriteria'?: SodViolationContextConflictingAccessCriteriaLeftCriteria;\n}\n/\n \n * @export\n * @interface SodViolationContextConflictingAccessCriteriaLeftCriteria\n /\nexport interface SodViolationContextConflictingAccessCriteriaLeftCriteria {\n /\n \n * @type {Array<SodExemptCriteria>}\n * @memberof SodViolationContextConflictingAccessCriteriaLeftCriteria\n /\n 'criteriaList'?: Array<SodExemptCriteria>;\n}\n/\n \n * @export\n * @interface SourceAccountSelections\n /\nexport interface SourceAccountSelections {\n /\n \n * @type {DtoType}\n * @memberof SourceAccountSelections\n /\n 'type'?: DtoType;\n /\n The source id\n * @type {string}\n * @memberof SourceAccountSelections\n /\n 'id'?: string;\n /\n The source name\n * @type {string}\n * @memberof SourceAccountSelections\n /\n 'name'?: string;\n /\n The accounts information for a particular source in the requested item\n * @type {Array<AccountInfoRef>}\n * @memberof SourceAccountSelections\n /\n 'accounts'?: Array<AccountInfoRef>;\n}\n\n\n/\n \n * @export\n * @interface SourceItemRef\n /\nexport interface SourceItemRef {\n /\n The id for the source on which account selections are made\n * @type {string}\n * @memberof SourceItemRef\n /\n 'sourceId'?: string \| null;\n /\n A list of account selections on the source. Currently, only one selection per source is supported.\n * @type {Array<AccountItemRef>}\n * @memberof SourceItemRef\n /\n 'accounts'?: Array<AccountItemRef> \| null;\n}\n\n/\n AccessRequestsApi - axios parameter creator\n * @export\n /\nexport const AccessRequestsApiAxiosParamCreator = function (configuration?: Configuration) {\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {BulkApproveAccessRequest} bulkApproveAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n approveBulkAccessRequestV1: async (bulkApproveAccessRequest: BulkApproveAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'bulkApproveAccessRequest' is not null or undefined\n assertParamExists('approveBulkAccessRequestV1', 'bulkApproveAccessRequest', bulkApproveAccessRequest)\n const localVarPath = `/access-request-approvals/v1/bulk-approve`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(bulkApproveAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {BulkCancelAccessRequest} bulkCancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestInBulkV1: async (bulkCancelAccessRequest: BulkCancelAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'bulkCancelAccessRequest' is not null or undefined\n assertParamExists('cancelAccessRequestInBulkV1', 'bulkCancelAccessRequest', bulkCancelAccessRequest)\n const localVarPath = `/access-requests/v1/bulk-cancel`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(bulkCancelAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {CancelAccessRequest} cancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestV1: async (cancelAccessRequest: CancelAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'cancelAccessRequest' is not null or undefined\n assertParamExists('cancelAccessRequestV1', 'cancelAccessRequest', cancelAccessRequest)\n const localVarPath = `/access-requests/v1/cancel`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(cancelAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {CloseAccessRequest} closeAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n closeAccessRequestV1: async (closeAccessRequest: CloseAccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'closeAccessRequest' is not null or undefined\n assertParamExists('closeAccessRequestV1', 'closeAccessRequest', closeAccessRequest)\n const localVarPath = `/access-requests/v1/close`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(closeAccessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequest} accessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n createAccessRequestV1: async (accessRequest: AccessRequest, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequest' is not null or undefined\n assertParamExists('createAccessRequestV1', 'accessRequest', accessRequest)\n const localVarPath = `/access-requests/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n getAccessRequestConfigV1: async (axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-config/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getAccessRequestConfigV2: async (axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-config/v2`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {string} identityId The identity ID.\n * @param {string} entitlementId The entitlement ID\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getEntitlementDetailsForIdentityV1: async (identityId: string, entitlementId: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'identityId' is not null or undefined\n assertParamExists('getEntitlementDetailsForIdentityV1', 'identityId', identityId)\n // verify required parameter 'entitlementId' is not null or undefined\n assertParamExists('getEntitlementDetailsForIdentityV1', 'entitlementId', entitlementId)\n const localVarPath = `/revocable-objects/v1`\n .replace(`{${\"identityId\"}}`, encodeURIComponent(String(identityId)))\n .replace(`{${\"entitlementId\"}}`, encodeURIComponent(String(entitlementId)));\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAccessRequestStatusV1: async (requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n const localVarPath = `/access-request-status/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n if (requestedFor !== undefined) {\n localVarQueryParameter['requested-for'] = requestedFor;\n }\n\n if (requestedBy !== undefined) {\n localVarQueryParameter['requested-by'] = requestedBy;\n }\n\n if (regardingIdentity !== undefined) {\n localVarQueryParameter['regarding-identity'] = regardingIdentity;\n }\n\n if (assignedTo !== undefined) {\n localVarQueryParameter['assigned-to'] = assignedTo;\n }\n\n if (count !== undefined) {\n localVarQueryParameter['count'] = count;\n }\n\n if (limit !== undefined) {\n localVarQueryParameter['limit'] = limit;\n }\n\n if (offset !== undefined) {\n localVarQueryParameter['offset'] = offset;\n }\n\n if (filters !== undefined) {\n localVarQueryParameter['filters'] = filters;\n }\n\n if (sorters !== undefined) {\n localVarQueryParameter['sorters'] = sorters;\n }\n\n if (requestState !== undefined) {\n localVarQueryParameter['request-state'] = requestState;\n }\n\n\n \n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {string} xSailPointExperimental Use this header to enable this experimental API.\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAdministratorsAccessRequestStatusV1: async (xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n if (xSailPointExperimental === undefined) {\n xSailPointExperimental = 'true';\n }\n \n // verify required parameter 'xSailPointExperimental' is not null or undefined\n assertParamExists('listAdministratorsAccessRequestStatusV1', 'xSailPointExperimental', xSailPointExperimental)\n const localVarPath = `/access-request-administration/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'GET', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n if (requestedFor !== undefined) {\n localVarQueryParameter['requested-for'] = requestedFor;\n }\n\n if (requestedBy !== undefined) {\n localVarQueryParameter['requested-by'] = requestedBy;\n }\n\n if (regardingIdentity !== undefined) {\n localVarQueryParameter['regarding-identity'] = regardingIdentity;\n }\n\n if (assignedTo !== undefined) {\n localVarQueryParameter['assigned-to'] = assignedTo;\n }\n\n if (count !== undefined) {\n localVarQueryParameter['count'] = count;\n }\n\n if (limit !== undefined) {\n localVarQueryParameter['limit'] = limit;\n }\n\n if (offset !== undefined) {\n localVarQueryParameter['offset'] = offset;\n }\n\n if (filters !== undefined) {\n localVarQueryParameter['filters'] = filters;\n }\n\n if (sorters !== undefined) {\n localVarQueryParameter['sorters'] = sorters;\n }\n\n if (requestState !== undefined) {\n localVarQueryParameter['request-state'] = requestState;\n }\n\n\n \n if (xSailPointExperimental != null) {\n localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);\n }\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccountsSelectionRequest} accountsSelectionRequest \n * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n loadAccountSelectionsV1: async (accountsSelectionRequest: AccountsSelectionRequest, xSailPointExperimental?: string, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accountsSelectionRequest' is not null or undefined\n assertParamExists('loadAccountSelectionsV1', 'accountsSelectionRequest', accountsSelectionRequest)\n if (xSailPointExperimental === undefined) {\n xSailPointExperimental = 'true';\n }\n \n const localVarPath = `/access-requests/v1/accounts-selection`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'POST', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n if (xSailPointExperimental != null) {\n localVarHeaderParameter['X-SailPoint-Experimental'] = String(xSailPointExperimental);\n }\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accountsSelectionRequest, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig} accessRequestConfig \n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n setAccessRequestConfigV1: async (accessRequestConfig: AccessRequestConfig, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequestConfig' is not null or undefined\n assertParamExists('setAccessRequestConfigV1', 'accessRequestConfig', accessRequestConfig)\n const localVarPath = `/access-request-config/v1`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequestConfig, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig2} accessRequestConfig2 \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n setAccessRequestConfigV2: async (accessRequestConfig2: AccessRequestConfig2, axiosOptions: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {\n // verify required parameter 'accessRequestConfig2' is not null or undefined\n assertParamExists('setAccessRequestConfigV2', 'accessRequestConfig2', accessRequestConfig2)\n const localVarPath = `/access-request-config/v2`;\n // use dummy base URL string because the URL constructor only accepts absolute URLs.\n const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);\n let baseOptions;\n if (configuration) {\n baseOptions = configuration.baseOptions;\n }\n\n const localVarRequestOptions = { method: 'PUT', ...baseOptions, ...axiosOptions};\n const localVarHeaderParameter = {} as any;\n const localVarQueryParameter = {} as any;\n\n\n \n localVarHeaderParameter['Content-Type'] = 'application/json';\n\n setSearchParams(localVarUrlObj, localVarQueryParameter);\n let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};\n localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...axiosOptions.headers};\n localVarRequestOptions.data = serializeDataIfNeeded(accessRequestConfig2, localVarRequestOptions, configuration)\n\n return {\n url: toPathString(localVarUrlObj),\n axiosOptions: localVarRequestOptions,\n };\n },\n }\n};\n\n/\n AccessRequestsApi - functional programming interface\n * @export\n /\nexport const AccessRequestsApiFp = function(configuration?: Configuration) {\n const localVarAxiosParamCreator = AccessRequestsApiAxiosParamCreator(configuration)\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {BulkApproveAccessRequest} bulkApproveAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async approveBulkAccessRequestV1(bulkApproveAccessRequest: BulkApproveAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.approveBulkAccessRequestV1(bulkApproveAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.approveBulkAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {BulkCancelAccessRequest} bulkCancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async cancelAccessRequestInBulkV1(bulkCancelAccessRequest: BulkCancelAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.cancelAccessRequestInBulkV1(bulkCancelAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.cancelAccessRequestInBulkV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {CancelAccessRequest} cancelAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async cancelAccessRequestV1(cancelAccessRequest: CancelAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.cancelAccessRequestV1(cancelAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.cancelAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {CloseAccessRequest} closeAccessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async closeAccessRequestV1(closeAccessRequest: CloseAccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<object>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.closeAccessRequestV1(closeAccessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.closeAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequest} accessRequest \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async createAccessRequestV1(accessRequest: AccessRequest, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestResponse>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.createAccessRequestV1(accessRequest, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.createAccessRequestV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n async getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getAccessRequestConfigV1(axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getAccessRequestConfigV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig2>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getAccessRequestConfigV2(axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getAccessRequestConfigV2']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {string} identityId The identity ID.\n * @param {string} entitlementId The entitlement ID\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async getEntitlementDetailsForIdentityV1(identityId: string, entitlementId: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<IdentityEntitlementDetails>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.getEntitlementDetailsForIdentityV1(identityId, entitlementId, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.getEntitlementDetailsForIdentityV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async listAccessRequestStatusV1(requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<RequestedItemStatus>>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.listAccessRequestStatusV1(requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.listAccessRequestStatusV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {string} xSailPointExperimental Use this header to enable this experimental API.\n * @param {string} [requestedFor] Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [requestedBy] Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @param {string} [regardingIdentity] Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @param {string} [assignedTo] Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @param {boolean} [count] If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @param {number} [limit] Max number of results to return.\n * @param {number} [offset] Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @param {string} [filters] Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @param {string} [sorters] Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @param {string} [requestState] Filter the results by the state of the request. The only valid value is EXECUTING.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async listAdministratorsAccessRequestStatusV1(xSailPointExperimental: string, requestedFor?: string, requestedBy?: string, regardingIdentity?: string, assignedTo?: string, count?: boolean, limit?: number, offset?: number, filters?: string, sorters?: string, requestState?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<AccessRequestAdminItemStatus>>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.listAdministratorsAccessRequestStatusV1(xSailPointExperimental, requestedFor, requestedBy, regardingIdentity, assignedTo, count, limit, offset, filters, sorters, requestState, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.listAdministratorsAccessRequestStatusV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccountsSelectionRequest} accountsSelectionRequest \n * @param {string} [xSailPointExperimental] Use this header to enable this experimental API.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async loadAccountSelectionsV1(accountsSelectionRequest: AccountsSelectionRequest, xSailPointExperimental?: string, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccountsSelectionResponse>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.loadAccountSelectionsV1(accountsSelectionRequest, xSailPointExperimental, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.loadAccountSelectionsV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig} accessRequestConfig \n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n async setAccessRequestConfigV1(accessRequestConfig: AccessRequestConfig, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.setAccessRequestConfigV1(accessRequestConfig, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.setAccessRequestConfigV1']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestConfig2} accessRequestConfig2 \n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n async setAccessRequestConfigV2(accessRequestConfig2: AccessRequestConfig2, axiosOptions?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<AccessRequestConfig2>> {\n const localVarAxiosArgs = await localVarAxiosParamCreator.setAccessRequestConfigV2(accessRequestConfig2, axiosOptions);\n const localVarOperationServerIndex = configuration?.serverIndex ?? 0;\n const localVarOperationServerBasePath = operationServerMap['AccessRequestsApi.setAccessRequestConfigV2']?.[localVarOperationServerIndex]?.url;\n return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath \|\| basePath);\n },\n }\n};\n\n/\n AccessRequestsApi - factory interface\n * @export\n /\nexport const AccessRequestsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {\n const localVarFp = AccessRequestsApiFp(configuration)\n return {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {AccessRequestsApiApproveBulkAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n approveBulkAccessRequestV1(requestParameters: AccessRequestsApiApproveBulkAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.approveBulkAccessRequestV1(requestParameters.bulkApproveAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {AccessRequestsApiCancelAccessRequestInBulkV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestInBulkV1(requestParameters: AccessRequestsApiCancelAccessRequestInBulkV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.cancelAccessRequestInBulkV1(requestParameters.bulkCancelAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {AccessRequestsApiCancelAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n cancelAccessRequestV1(requestParameters: AccessRequestsApiCancelAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.cancelAccessRequestV1(requestParameters.cancelAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {AccessRequestsApiCloseAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n closeAccessRequestV1(requestParameters: AccessRequestsApiCloseAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<object> {\n return localVarFp.closeAccessRequestV1(requestParameters.closeAccessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequestsApiCreateAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n createAccessRequestV1(requestParameters: AccessRequestsApiCreateAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestResponse> {\n return localVarFp.createAccessRequestV1(requestParameters.accessRequest, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig> {\n return localVarFp.getAccessRequestConfigV1(axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig2> {\n return localVarFp.getAccessRequestConfigV2(axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {AccessRequestsApiGetEntitlementDetailsForIdentityV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n getEntitlementDetailsForIdentityV1(requestParameters: AccessRequestsApiGetEntitlementDetailsForIdentityV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<IdentityEntitlementDetails> {\n return localVarFp.getEntitlementDetailsForIdentityV1(requestParameters.identityId, requestParameters.entitlementId, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {AccessRequestsApiListAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAccessRequestStatusV1(requestParameters: AccessRequestsApiListAccessRequestStatusV1Request = {}, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<RequestedItemStatus>> {\n return localVarFp.listAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {AccessRequestsApiListAdministratorsAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<Array<AccessRequestAdminItemStatus>> {\n return localVarFp.listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccessRequestsApiLoadAccountSelectionsV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n loadAccountSelectionsV1(requestParameters: AccessRequestsApiLoadAccountSelectionsV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccountsSelectionResponse> {\n return localVarFp.loadAccountSelectionsV1(requestParameters.accountsSelectionRequest, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n /\n setAccessRequestConfigV1(requestParameters: AccessRequestsApiSetAccessRequestConfigV1Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig> {\n return localVarFp.setAccessRequestConfigV1(requestParameters.accessRequestConfig, axiosOptions).then((request) => request(axios, basePath));\n },\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV2Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n /\n setAccessRequestConfigV2(requestParameters: AccessRequestsApiSetAccessRequestConfigV2Request, axiosOptions?: RawAxiosRequestConfig): AxiosPromise<AccessRequestConfig2> {\n return localVarFp.setAccessRequestConfigV2(requestParameters.accessRequestConfig2, axiosOptions).then((request) => request(axios, basePath));\n },\n };\n};\n\n/\n Request parameters for approveBulkAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiApproveBulkAccessRequestV1Request\n /\nexport interface AccessRequestsApiApproveBulkAccessRequestV1Request {\n /\n \n * @type {BulkApproveAccessRequest}\n * @memberof AccessRequestsApiApproveBulkAccessRequestV1\n /\n readonly bulkApproveAccessRequest: BulkApproveAccessRequest\n}\n\n/\n Request parameters for cancelAccessRequestInBulkV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCancelAccessRequestInBulkV1Request\n /\nexport interface AccessRequestsApiCancelAccessRequestInBulkV1Request {\n /\n \n * @type {BulkCancelAccessRequest}\n * @memberof AccessRequestsApiCancelAccessRequestInBulkV1\n /\n readonly bulkCancelAccessRequest: BulkCancelAccessRequest\n}\n\n/\n Request parameters for cancelAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCancelAccessRequestV1Request\n /\nexport interface AccessRequestsApiCancelAccessRequestV1Request {\n /\n \n * @type {CancelAccessRequest}\n * @memberof AccessRequestsApiCancelAccessRequestV1\n /\n readonly cancelAccessRequest: CancelAccessRequest\n}\n\n/\n Request parameters for closeAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCloseAccessRequestV1Request\n /\nexport interface AccessRequestsApiCloseAccessRequestV1Request {\n /\n \n * @type {CloseAccessRequest}\n * @memberof AccessRequestsApiCloseAccessRequestV1\n /\n readonly closeAccessRequest: CloseAccessRequest\n}\n\n/\n Request parameters for createAccessRequestV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiCreateAccessRequestV1Request\n /\nexport interface AccessRequestsApiCreateAccessRequestV1Request {\n /\n \n * @type {AccessRequest}\n * @memberof AccessRequestsApiCreateAccessRequestV1\n /\n readonly accessRequest: AccessRequest\n}\n\n/\n Request parameters for getEntitlementDetailsForIdentityV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiGetEntitlementDetailsForIdentityV1Request\n /\nexport interface AccessRequestsApiGetEntitlementDetailsForIdentityV1Request {\n /\n The identity ID.\n * @type {string}\n * @memberof AccessRequestsApiGetEntitlementDetailsForIdentityV1\n /\n readonly identityId: string\n\n /\n The entitlement ID\n * @type {string}\n * @memberof AccessRequestsApiGetEntitlementDetailsForIdentityV1\n /\n readonly entitlementId: string\n}\n\n/\n Request parameters for listAccessRequestStatusV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiListAccessRequestStatusV1Request\n /\nexport interface AccessRequestsApiListAccessRequestStatusV1Request {\n /\n Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestedFor?: string\n\n /\n Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestedBy?: string\n\n /\n Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly regardingIdentity?: string\n\n /\n Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly assignedTo?: string\n\n /\n If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @type {boolean}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly count?: boolean\n\n /\n Max number of results to return.\n * @type {number}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly limit?: number\n\n /\n Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @type {number}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly offset?: number\n\n /\n Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accessRequestId: eq, ge, gt, le, lt, ne, sw accountActivityItemId: eq, in, ge, gt, le, ne, sw created: eq, ge, gt, le, lt, ne\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly filters?: string\n\n /\n Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly sorters?: string\n\n /\n Filter the results by the state of the request. The only valid value is EXECUTING.\n * @type {string}\n * @memberof AccessRequestsApiListAccessRequestStatusV1\n /\n readonly requestState?: string\n}\n\n/\n Request parameters for listAdministratorsAccessRequestStatusV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request\n /\nexport interface AccessRequestsApiListAdministratorsAccessRequestStatusV1Request {\n /\n Use this header to enable this experimental API.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly xSailPointExperimental: string\n\n /\n Filter the results by the identity the requests were made for. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestedFor?: string\n\n /\n Filter the results by the identity who made the requests. me indicates the current user. Mutually exclusive with regarding-identity.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestedBy?: string\n\n /\n Filter the results by the specified identity who is either the requester or target of the requests. me indicates the current user. Mutually exclusive with requested-for and requested-by.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly regardingIdentity?: string\n\n /\n Filter the results by the specified identity who is the owner of the Identity Request Work Item. me indicates the current user.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly assignedTo?: string\n\n /\n If this is true, the X-Total-Count response header populates with the number of results that would be returned if limit and offset were ignored.\n * @type {boolean}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly count?: boolean\n\n /\n Max number of results to return.\n * @type {number}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly limit?: number\n\n /\n Offset into the full result set. Usually specified with limit to paginate through the results. Defaults to 0 if not specified.\n * @type {number}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly offset?: number\n\n /\n Filter results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#filtering-results) Filtering is supported for the following fields and operators: accountActivityItemId: eq, in, ge, gt, le, lt, ne, isnull, sw accessRequestId: in, eq, ne, ge, gt, le, lt, sw status: in, eq, ne created: eq, in, ge, gt, le, lt, ne, isnull, sw\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly filters?: string\n\n /\n Sort results using the standard syntax described in [V3 API Standard Collection Parameters](https://developer.sailpoint.com/idn/api/standard-collection-parameters#sorting-results) Sorting is supported for the following fields: created, modified, accountActivityItemId, name, accessRequestId\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly sorters?: string\n\n /\n Filter the results by the state of the request. The only valid value is EXECUTING.\n * @type {string}\n * @memberof AccessRequestsApiListAdministratorsAccessRequestStatusV1\n /\n readonly requestState?: string\n}\n\n/\n Request parameters for loadAccountSelectionsV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiLoadAccountSelectionsV1Request\n /\nexport interface AccessRequestsApiLoadAccountSelectionsV1Request {\n /\n \n * @type {AccountsSelectionRequest}\n * @memberof AccessRequestsApiLoadAccountSelectionsV1\n /\n readonly accountsSelectionRequest: AccountsSelectionRequest\n\n /\n Use this header to enable this experimental API.\n * @type {string}\n * @memberof AccessRequestsApiLoadAccountSelectionsV1\n /\n readonly xSailPointExperimental?: string\n}\n\n/\n Request parameters for setAccessRequestConfigV1 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiSetAccessRequestConfigV1Request\n /\nexport interface AccessRequestsApiSetAccessRequestConfigV1Request {\n /\n \n * @type {AccessRequestConfig}\n * @memberof AccessRequestsApiSetAccessRequestConfigV1\n /\n readonly accessRequestConfig: AccessRequestConfig\n}\n\n/\n Request parameters for setAccessRequestConfigV2 operation in AccessRequestsApi.\n * @export\n * @interface AccessRequestsApiSetAccessRequestConfigV2Request\n /\nexport interface AccessRequestsApiSetAccessRequestConfigV2Request {\n /\n \n * @type {AccessRequestConfig2}\n * @memberof AccessRequestsApiSetAccessRequestConfigV2\n /\n readonly accessRequestConfig2: AccessRequestConfig2\n}\n\n/\n AccessRequestsApi - object-oriented interface\n * @export\n * @class AccessRequestsApi\n * @extends {BaseAPI}\n /\nexport class AccessRequestsApi extends BaseAPI {\n /\n This API endpoint allows approving pending access requests in bulk. Maximum of 50 approval ids can be provided in the request for one single invocation. ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can approve the access requests in bulk.\n * @summary Bulk approve access request\n * @param {AccessRequestsApiApproveBulkAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public approveBulkAccessRequestV1(requestParameters: AccessRequestsApiApproveBulkAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).approveBulkAccessRequestV1(requestParameters.bulkApproveAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This API endpoint allows cancelling pending access requests in bulk. Maximum of 50 access request ids can be provided in the request for one single invocation. Only ORG_ADMIN or users with rights \\\"idn:access-request-administration:write\\\" can cancel the access requests in bulk.\n * @summary Bulk cancel access request\n * @param {AccessRequestsApiCancelAccessRequestInBulkV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public cancelAccessRequestInBulkV1(requestParameters: AccessRequestsApiCancelAccessRequestInBulkV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).cancelAccessRequestInBulkV1(requestParameters.bulkCancelAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This API endpoint cancels a pending access request. An access request can be cancelled only if it has not passed the approval step. In addition to users with ORG_ADMIN, any user who originally submitted the access request may cancel it.\n * @summary Cancel access request\n * @param {AccessRequestsApiCancelAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public cancelAccessRequestV1(requestParameters: AccessRequestsApiCancelAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).cancelAccessRequestV1(requestParameters.cancelAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint closes access requests that are stuck in a pending state. It can be used throughout a request\\'s lifecycle even after the approval state, unlike the [Cancel Access Request endpoint](https://developer.sailpoint.com/docs/api/cancel-access-request-v-1). To find pending access requests with the UI, navigate to Search and use this query: status: Pending AND \\\"Access Request\\\". Use the Column Chooser to select \\'Tracking Number\\', and use the \\'Download\\' button to export a CSV containing the tracking numbers. To find pending access requests with the API, use the [List Account Activities endpoint](https://developer.sailpoint.com/docs/api/list-account-activities-v-1). Input the IDs from either source. To track the status of endpoint requests, navigate to Search and use this query: name:\\\"Close Identity Requests\\\". Search will include \\\"Close Identity Requests Started\\\" audits when requests are initiated and \\\"Close Identity Requests Completed\\\" audits when requests are completed. The completion audit will list the identity request IDs that finished in error. This API triggers the [Provisioning Completed event trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/provisioning-completed/) for each access request that is closed. \n * @summary Close access request\n * @param {AccessRequestsApiCloseAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public closeAccessRequestV1(requestParameters: AccessRequestsApiCloseAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).closeAccessRequestV1(requestParameters.closeAccessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to submit an access request in Identity Security Cloud (ISC), where it follows any ISC approval processes. >Security: idn:access-request:manage is for ORG_ADMIN level. idn:access-request-self:manage is for USER level. :::info The ability to request access using this API is constrained by the Access Request Segments defined in the API token\\'s user context. ::: Access requests are processed asynchronously by ISC. A successful response from this endpoint means that the request has been submitted to ISC and is queued for processing. Because this endpoint is asynchronous, it does not return an error if you submit duplicate access requests in quick succession or submit an access request for access that is already in progress, approved, or rejected. It is best practice to check for any existing access requests that reference the same access items before submitting a new access request. This can be accomplished by using the [List Access Request Status](https://developer.sailpoint.com/docs/api/list-access-request-status-v-1) or the [Pending Access Request Approvals](https://developer.sailpoint.com/docs/api/list-pending-approvals-v-1) APIs. You can also use the [Search API](https://developer.sailpoint.com/docs/api/search) to check the existing access items an identity has before submitting an access request to ensure that you aren\\'t requesting access that is already granted. If you use this API to request access that an identity already has, without changing the account details or end date information from the existing assignment, the API will cancel the request as a duplicate. There are two types of access request: __GRANT_ACCESS__ * Can be requested for multiple identities in a single request. * Supports self request and request on behalf of other users. Refer to the [Get Access Request Configuration](https://developer.sailpoint.com/docs/api/get-access-request-config-v-2) endpoint for request configuration options. * Allows any authenticated token (except API) to call this endpoint to request to grant access to themselves. Depending on the configuration, a user can request access for others. * Roles, access profiles and entitlements can be requested. * You can specify a `startDate` to set or alter a sunrise date-time on an assignment. The startDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunrise date and its yet to be provisioned, you can also submit a request without a `startDate` to request immediate provisioning after approval. * If a `startDate` is specified, then the requested role, access profile, or entitlement will be provisioned on that date and time. * You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Now supports an alternate field \\'requestedForWithRequestedItems\\' for users to specify account selections while requesting items where they have more than one account on the source. __MACHINE IDENTITY ACCESS REQUESTS__ * Machine identity access requests reuse this same endpoint. They must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. Do not use the flat `requestedFor` / `requestedItems` shape for machines. Mixed human and machine identities in one request are not supported. * Request `identityType` uses `HUMAN` / `MACHINE`. List, status, and approval responses use `IDENTITY` / `MACHINE_IDENTITY` on `requestedFor.type` for the same distinction. Prerequisites and authorization: * The organization must have Machine Identity Security licensed; otherwise the request is rejected with 403. * Access request config v2 `machineIdentityAccessRequestEnabled` must be true (default true); otherwise 403. * Request-on-behalf-of for machines is controlled by `allowRequestOnBehalfOfForMachineIdentity` and `allowRequestForMachineByOwner` on the access request configuration. See those schema fields for the authorization cascade (open ROBO, owner/admin ROBO, then admin-only fallback). Constraints for machine requests: * Only `ENTITLEMENT` items are supported (roles and access profiles are rejected). * GRANT_ACCESS and MODIFY_ACCESS requests require `accountSelection` to be provided with `accountUuid` and/or `nativeIdentity` that match a real machine account for that machine identity on the selected source. Prefer values returned by the accounts-selection API. * MODIFY_ACCESS requests additionally require each item to have `startDate` and/or `removeDate` to denote date modifications. * REVOKE_ACCESS must target exactly one machine identity. Per entitlement item, provide `nativeIdentity` (or it may be auto-resolved when the machine has exactly one account on the entitlement source). Do not send `accountSelection` on machine revoke. * Multi-machine GRANT_ACCESS is allowed within existing recipient limits; multi-machine REVOKE_ACCESS is not. __FORMS IN ACCESS REQUESTS__ * Forms apply to human GRANT_ACCESS requests for roles, access profiles, and entitlements. Forms are not used for REVOKE_ACCESS. * Roles, access profiles, and entitlements can optionally reference a `formDefinitionId` in their request configuration. When configured, the requester completes that form and includes the resulting `formInstanceId` on each affected GRANT_ACCESS line item when submitting the access request. * Provide `formInstanceId` on each GRANT_ACCESS line item in `requestedItems` (flat payload) or in `requestedForWithRequestedItems.requestedItems` (nested payload). An empty `formInstanceId` on a GRANT_ACCESS line item is rejected with HTTP 400. * When a configured form is required, a missing `formInstanceId`, a submitted form whose definition does not match the configured `formDefinitionId`, or form instance data that could not be read may fail the request during asynchronous processing even when this endpoint returns success. * Reusing the same `formInstanceId` for the same requested object across multiple recipients is supported. * Completed form answers are returned on access request status, administration, and approval responses in the `form` object on each item. Access request pre-approval and dynamic approver trigger inputs may include `form` on each entry in `requestedItems`. The post-approval trigger includes `form` on each entry in `requestedItemsStatus`. :::caution If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits. ::: __REVOKE_ACCESS__ * Can only be requested for a single identity at a time. * You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning. * Does not support self request. Only manager can request to revoke access for their directly managed employees. * If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time. * Roles, access profiles, and entitlements can be requested for revocation. * Revoke requests for entitlements are limited to 1 entitlement per access request currently. * You cannot specify a \\'startDate\\' in a REVOKE_ACCESS request, as startDate is only applicable for GRANT_ACCESS requests to indicate when the access should be provisioned, and it does not make sense in the context of revoking access. * You can specify a `removeDate` to add or alter a sunset date and time on an assignment. The `removeDate` must be a future date-time, in the UTC timezone. If the user already has the access assigned with a sunset date and time, the removeDate must be a date-time earlier than the existing sunset date and time. * Allows a manager to request to revoke access for direct employees. A user with ORG_ADMIN authority can also request to revoke access from anyone. * Now supports REVOKE_ACCESS requests for identities with multiple accounts on a single source, with the help of \\'assignmentId\\' and \\'nativeIdentity\\' fields. These fields should be used within the \\'requestedItems\\' section for the revoke requests. * For human identities, usage of \\'requestedForWithRequestedItems\\' is not supported for revoke requests. Machine identity revoke requests must use \\'requestedForWithRequestedItems\\' with `identityType: MACHINE` as described above. \n * @summary Submit access request\n * @param {AccessRequestsApiCreateAccessRequestV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public createAccessRequestV1(requestParameters: AccessRequestsApiCreateAccessRequestV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).createAccessRequestV1(requestParameters.accessRequest, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getAccessRequestConfigV1(axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getAccessRequestConfigV1(axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint returns the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Get access request configuration\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getAccessRequestConfigV2(axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getAccessRequestConfigV2(axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to return the details for a entitlement on an identity including specific data relating to remove date and the ability to revoke the identity.\n * @summary Identity entitlement details\n * @param {AccessRequestsApiGetEntitlementDetailsForIdentityV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public getEntitlementDetailsForIdentityV1(requestParameters: AccessRequestsApiGetEntitlementDetailsForIdentityV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).getEntitlementDetailsForIdentityV1(requestParameters.identityId, requestParameters.entitlementId, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to return a list of access request statuses based on the specified query parameters. If an access request was made for access that an identity already has, the API ignores the access request. These ignored requests do not display in the list of access request statuses. Any user with any user level can get the status of their own access requests. A user with ORG_ADMIN is required to call this API to get a list of statuses for other users. For access requests for machines, each status item will include `identityType` as `MACHINE` and `requestedFor` with `type: MACHINE_IDENTITY` and the machine id. Requests without a stored identity type are returned as `HUMAN` / `IDENTITY`. When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status\n * @param {AccessRequestsApiListAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public listAccessRequestStatusV1(requestParameters: AccessRequestsApiListAccessRequestStatusV1Request = {}, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).listAccessRequestStatusV1(requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to get access request statuses of all the access requests in the org based on the specified query parameters. Any user with user level ORG_ADMIN or scope idn:access-request-administration:read can access this endpoint to get the access request statuses When a requested object has an associated form, each status item may include a `form` object with the form definition ID, instance ID, and answers (`formData`).\n * @summary Access request status for administrators\n * @param {AccessRequestsApiListAdministratorsAccessRequestStatusV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public listAdministratorsAccessRequestStatusV1(requestParameters: AccessRequestsApiListAdministratorsAccessRequestStatusV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).listAdministratorsAccessRequestStatusV1(requestParameters.xSailPointExperimental, requestParameters.requestedFor, requestParameters.requestedBy, requestParameters.regardingIdentity, requestParameters.assignedTo, requestParameters.count, requestParameters.limit, requestParameters.offset, requestParameters.filters, requestParameters.sorters, requestParameters.requestState, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n Use this API to fetch account information for an identity against the items in an access request. Used to fetch accountSelection for the AccessRequest prior to submitting for async processing. __Machine identities__ * Must use `requestedForWithRequestedItems` with `identityType: MACHINE` on each entry. * Fields `requestedFor` / `requestedItems` are not supported and should be omitted. * Only `ENTITLEMENT` items are supported. * Mixed human and machine identities in one request are not supported. * Response identities use `type: MACHINE_IDENTITY`. Use the returned account `accountUuid` / `nativeIdentity` values when submitting the access request; invalid or mismatched account details are rejected on create. * If the machine has no account on a requested source, the item may be returned with `accountsSelectionBlocked: true` and `accountsSelectionBlockedReason: NO_ACCOUNT_ON_SOURCE` (empty accounts on the response in that blocked case is expected). * Same licensing, `machineIdentityAccessRequestEnabled`, and request-on-behalf-of rules as create access request apply. \n * @summary Get accounts selections for identity\n * @param {AccessRequestsApiLoadAccountSelectionsV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public loadAccountSelectionsV1(requestParameters: AccessRequestsApiLoadAccountSelectionsV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).loadAccountSelectionsV1(requestParameters.accountsSelectionRequest, requestParameters.xSailPointExperimental, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV1Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @deprecated\n * @throws {RequiredError}\n * @memberof AccessRequestsApi\n /\n public setAccessRequestConfigV1(requestParameters: AccessRequestsApiSetAccessRequestConfigV1Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).setAccessRequestConfigV1(requestParameters.accessRequestConfig, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n\n /\n This endpoint replaces the current access-request configuration. To manage approval configurations, use the [Put approval config](https://developer.sailpoint.com/docs/api/put-approvals-config-v-1/) endpoint.\n * @summary Update access request configuration\n * @param {AccessRequestsApiSetAccessRequestConfigV2Request} requestParameters Request parameters.\n * @param {} [axiosOptions] Override http request option.\n @throws {RequiredError}\n * @memberof AccessRequestsApi\n */\n public setAccessRequestConfigV2(requestParameters: AccessRequestsApiSetAccessRequestConfigV2Request, axiosOptions?: RawAxiosRequestConfig) {\n return AccessRequestsApiFp(this.configuration).setAccessRequestConfigV2(requestParameters.accessRequestConfig2, axiosOptions).then((request) => request(this.axios, this.basePath));\n }\n}\n\n\n\n"]}