# Access Object ### Description The `Access` object is used to represent a principal's access to an entity, either directly or inherited.

ActiveDirectoryGroup - Remote info for Active Directory group.

# App Object ### Description The `App` object is used to represent an app to an application.

AppsList - A list of apps.

AwsAccount - Remote info for AWS account.

AwsEc2Instance - Remote info for AWS EC2 instance.

AwsEksCluster - Remote info for AWS EKS cluster.

AwsIamRole - Remote info for AWS IAM role.

AwsPermissionSet - Remote info for AWS Identity Center permission set.

AwsRdsInstance - Remote info for AWS RDS instance.

AzureAdMicrosoft365Group - Remote info for Microsoft Entra ID Microsoft 365 group.

AzureAdSecurityGroup - Remote info for Microsoft Entra ID Security group.

ConfigurationTemplate - # Configuration Template Object ### Description The `ConfigurationTemplate` object is used to represent a configuration template.

# CreateConfigurationTemplateInfo Object ### Description The `CreateConfigurationTemplateInfo` object is used to store creation info for a configuration template.

# CreateGroupBindingInfo Object ### Description The `CreateGroupBindingInfo` object is used as an input to the CreateGroupBinding API.

# CreateGroupInfo Object ### Description The `CreateGroupInfo` object is used to store creation info for a group.

# CreateMessageChannelInfo Object ### Description The `CreateMessageChannelInfo` object is used to describe the message channel object to be created.

# CreateOnCallScheduleInfo Object ### Description The `CreateOnCallScheduleInfo` object is used to describe the on call schedule object to be created.

# CreateOwnerInfo Object ### Description The `CreateOwnerInfo` object is used to store creation info for an owner.

CreateRequestInfo - All the information needed for creating a request.

# CreateResourceInfo Object ### Description The `CreateResourceInfo` object is used to store creation info for a resource.

# CreateTagInfo Object ### Description The `CreateTagInfo` object is used to represent configuration for a new tag.

CreateUARInfo - Information needed to start a user access review.

DuoGroup - Remote info for Duo Security group.

# Event Object ### Description The `Event` object is used to represent an event.

GcpBigQueryDataset - Remote info for GCP BigQuery Dataset.

GcpBigQueryTable - Remote info for GCP BigQuery Table.

GcpBucket - Remote info for GCP bucket.

GcpComputeInstance - Remote info for GCP compute instance.

GcpFolder - Remote info for GCP folder.

GcpGkeCluster - Remote info for GCP GKE cluster.

GcpOrganization - Remote info for GCP organization.

GcpProject - Remote info for GCP project.

GcpServiceAccount - Remote info for a GCP service account.

GcpSQLInstance - Remote info for GCP SQL instance.

GithubRepo - Remote info for GitHub repository.

GithubTeam - Remote info for GitHub team.

GitlabGroup - Remote info for Gitlab group.

GitlabProject - Remote info for Gitlab project.

GoogleGroup - Remote info for Google group.

# Group Object ### Description The `Group` object is used to represent a group.

GroupAccessLevel - # Access Level Object ### Description The `GroupAccessLevel` object is used to represent the level of access that a user has to a group or a group has to a group.

GroupBinding - # Group Binding Object ### Description The `GroupBinding` object is used to represent a group binding.

GroupBindingGroup - # Group Binding Group Object ### Description The `GroupBindingGroup` object is used to represent a group binding group.

GroupRemoteInfo - Information that defines the remote group.

# GroupResource Object ### Description The `GroupResource` object is used to represent a relationship between a group and a resource.

GroupUser - # Group Access User Object ### Description The `GroupAccessUser` object is used to represent a user with access to a group.

LdapGroup - Remote info for LDAP group.

# MessageChannel Object ### Description The `MessageChannel` object is used to represent a message channel.

MessageChannelIDList - A list of message channel IDs.

OktaApp - Remote info for Okta directory app.

OktaCustomRole - Remote info for Okta directory custom role.

OktaGroup - Remote info for Okta Directory group.

OktaStandardRole - Remote info for Okta directory standard role.

# OnCallSchedule Object ### Description The `OnCallSchedule` object is used to represent an on call schedule.

OnCallScheduleIDList - A list of on call schedule Opal UUIDs.

# Owner Object ### Description The `Owner` object is used to represent an owner.

PagerdutyRole - Remote info for Pagerduty role.

# PaginatedConfigurationTemplateList Object ### Description The `PaginatedConfigurationTemplateList` object is used to store a list of configuration templates.

PaginatedUARsList - A list of UARs.

# Request Object ### Description The `Request` object is used to represent a request.

RequestConfiguration - # Request Configuration Object ### Description The `RequestConfiguration` object is used to represent a request configuration.

RequestedItem - # Requested Item Object ### Description The `RequestedItem` object is used to represent a request target item.

RequestList - # Request List ### Description The `RequestList` object is used to represent a list of requests.

# Resource Object ### Description The `Resource` object is used to represent a resource.

ResourceAccessLevel - # Access Level Object ### Description The `AccessLevel` object is used to represent the level of access that a principal has.

ResourceAccessUser - # Resource Access User Object ### Description The `ResourceAccessUser` object is used to represent a user with access to a resource, either directly or indirectly through group(s).

ResourceNHI - # Resource Non-Human Identity Direct Access Object ### Description This object is used to represent a non-human identity with direct access to a resource.

ResourceRemoteInfo - Information that defines the remote resource.

ResourceUserAccessStatus - # AccessStatus Object ### Description The `AccessStatus` object is used to represent the user's access to the resource.

ResourceWithAccessLevel - Information about a resource and corresponding access level.

ReviewerIDList - A list of reviewer IDs.

ReviewerStage - A reviewer stage.

SalesforcePermissionSet - Remote info for Salesforce permission set.

SalesforceProfile - Remote info for Salesforce profile.

SalesforceRole - Remote info for Salesforce role.

# Session Object ### Description The `Session` object is used to represent an access session.

SubEvent - # Sub event Object ### Description The `SubEvent` object is used to represent a subevent.

# Tag Object ### Description The `Tag` object is used to represent a tag.

TagFilter - A tag filter defined by the tags key and value.

TeleportRole - Remote info for Teleport role.

TicketPropagationConfiguration - Configuration for ticket propagation, when enabled, a ticket will be created for access changes related to the users in this resource.

Uar - A user access review.

UARScope - If set, the access review will only contain resources and groups that match at least one of the filters in scope.

# UpdateConfigurationTemplateInfo Object ### Description The `ConfigurationTemplate` object is used to represent an update to a configuration template.

# UpdateGroupBindingInfo Object ### Description The `UpdateGroupBindingInfo` object is used as an input to the UpdateGroupBinding API.

# UpdateGroupInfo Object ### Description The `UpdateGroupInfo` object is used as an input to the UpdateGroup API.

# UpdateOwnerInfo Object ### Description The `UpdateOwnerInfo` object is used as an input to the UpdateOwner API.

# UpdateResourceInfo Object ### Description The `UpdateResourceInfo` object is used as an input to the UpdateResource API.

# User Object ### Description The `User` object is used to represent a user.

UserIDList - A list of user IDs.

UserList - A list of users.

VisibilityInfo - Visibility infomation of an entity.

AppTypeEnum - The type of an app.

EntityTypeEnum - The type of an entity.

FilterOperator - Specifies whether entities must match all (AND) or any (OR) of the filters.

GroupTypeEnum - The type of the group.

GroupVisibility - Specifies what users can see during an Access Review.

MessageChannelProviderEnum - The third party provider of the message channel.

OnCallScheduleProviderEnum - The third party provider of the on call schedule.

Operator - The operator of the reviewer stage.

RequestStatusEnum - # Request Status ### Description The `RequestStatus` enum is used to represent the status of a request.

RequestTemplateCustomFieldTypeEnum - The type of the custom request field.

ResourceTypeEnum - The type of the resource.

ResourceUserAccessStatusEnum - The status of the user's access to the resource.

TicketingProviderEnum - The third party ticketing platform provider.

UARReviewerAssignmentPolicyEnum - A policy for auto-assigning reviewers.

UserHrIdpStatusEnum - User status pulled from an HR/IDP provider.

VisibilityTypeEnum - The visibility level of the entity.