Skip to main content

Find Change Requests

Find change requests. The command uses the PV_CHANGE_REQUEST public view to find data.

GET https://instance.securid.com/aveksa/command.submit?cmd=findChangeRequests

Request

Parameters

findChangeRequests
format

properties - (Default) key=value. most useful when requesting a single object. If multiple objects are returned, values is a csv. ie key=value1,value2,value3 where value1 is the value for the first object, value2 is the value for the 2nd object, etc.

json - Useful format for parsing into javascript or other languages. See www.json.org for details.

csv - Comma separated values

tsv - Tab separated values

xml - Extensible Markup Language
delimiterThe delimiter to use between values for csv, properties formats
returnColumns

The names of the columns to return. returnColumns may be a CSV list of multiple column names. The returnColumns parameter may also be listed multiple times (ie returnColumns=col1,col2&returnColumns=col3,col4)

Refer to Columns table below.
returnMaxRowsThe maximum number of objects to return
distincttrue, false Returns only distinct values similar to the distinct keyword in SQL.
sortByColumns

The results will be sorted based on the columns listed using comma as the delimiter if multiple columns are specified.

Refer to Columns table below.
sortDirectionThis determines sorting order. When defined as 'asc' the sorting is in ascending order else in 'desc' descending order. If this parameter is not specified, the natural order of rows returned by database is used.
includeHeaderRowtrue, false To include column headers when the return format is csv, tsv. (Default) true
ignoreCasetrue, false Returns case insensitive search result for specified filter parameters. (Default) false

Columns

id[Primary Key] Unique change request identifier
nameChange request name
typeChange request type. Has the following values:
  • System
  • Role
  • RoleSet
requestor_id[Foreign Key referencing USERS.ID] User id that created this change request
request_dateDate stamp when this change request was created
completed_dateDate stamp when this change request was completed.
notesNotes associated with this change request.
current_stateCurrent state of the change request. Has the following values:
  • Open
  • PendingApprovals
  • Rejected
  • PendingVerification
  • PendingUndoVerification
  • Completed
  • Cancelled
  • ER
is_undonetrue, false Whether this change request was undone.
descriptionDescription for this entry
delay_dateDelay date
violationsViolations
is_alldirecteventtrue, false Indicates whether all direct changes have been fulfilled (indirect changes may be still outstanding).
undoworkflow_idThe id of the workflow being used to undo the request (the request has been canceled).
source_typeSource type. Has the following values:
  • ExplicitAccess
  • RuleViolations
  • RoleManagement
  • RoleSetManagement
  • AccessCertification
  • UserReview
  • AccountReview
  • RoleReview
  • GroupReview
  • DataResourceReview
  • DataResourceOwnershipReview
source_objectSource object
editableY, N Editable
fulfillcancelY, NIndicates whether cancel of the request is allowed once the request is in the fulfillment phase
session_idSession id
session_timeSession time
attachment_set_idAttachment set id
form_idForm id
form_dataForm data
visible_to_targetY, N Specifies whether the pending change request initiated through the form appears under a user’s Requests tab.You typically might not want a pending termination request to be visible to a user for whom the request was generated.
cancellableY, N Specifies whether a change request can be canceled
review_def_idThe identifier of the review definition
review_dateDate the review was generated
delegate_idSpecifies the person to whom the delegation capabilities are granted.
versionIndicates whether the new change request needs to be handled differently than legacy on restart
archive_id???
approval_phase_completed_dateDate, with time, that approval phase of change request was completed.
fulfillment_phase_start_dateDate, with time, that fulfillment phase of change request was started. May be null if request is not moving on to fulfillment phase (ie. request may have been cancelled, rejected, etc).
total_approval_time_valueTotal approval time, as a decimal in days. Use this value and format appropriately when the exact value is desired.
total_approval_time_daysTotal approval time, as an integer in days. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired.
total_approval_time_hoursTotal approval time, as an integer in hours. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired.
total_approval_time_textTotal approval time, as string value in the format of "x days y hours", where x and y are both integers. Use this column as a helper for display in reports.
total_fulfillment_time_valueTotal fulfillment time, as a decimal in days. Use this value and format appropriately when the exact value is desired.
total_fulfillment_time_daysTotal fulfillment time, as an integer in days. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired.
total_fulfillment_time_hoursTotal fulfillment time, as an integer in hours. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired.
total_fulfillment_time_textTotal fulfillment time, as string value in the format of "x days y hours", where x and y are both integers. Use this column as a helper for display in reports.
total_time_valueTotal time, as a decimal in days. Use this value and format appropriately when the exact value is desired.
total_time_hoursTotal time, as an integer in hours. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired.
total_time_daysTotal time, as an integer in days. Use this value mainly for grouping and sorting. Use the _value column when the exact value is desired
total_time_textTotal time, as string value in the format of "x days y hours", where x and y are both integers. Use this column as a helper for display in reports.
request_date_no_timeDate, without time, extracted from REQUEST_DATE
request_date_yearYear, as integer, extracted from REQUEST_DATE
request_date_monthMonth, as integer, extracted from REQUEST_DATE.
request_date_month_textMonth, as string, extracted from REQUEST_DATE. (ie. January)
request_date_month_abvMonth abbreviation, as string extracted from REQUEST_DATE. (ie. Jan)
request_date_dayDay of Month, as integer, extracted from REQUEST_DATE.
request_week_of_yearWeek of the year, as integer, extracted from REQUEST_DATE.
completed_date_no_timeDate, without time, extracted from COMPLETED_DATE
completed_date_yearYear, as integer, extracted from COMPLETED_DATE
completed_date_monthMonth, as integer, extracted from COMPLETED_DATE.
completed_date_month_textMonth, as string, extracted from COMPLETED_DATE. (ie. January)
completed_date_month_abvMonth abbreviation, as string extracted from COMPLETED_DATE. (ie. Jan)
completed_date_dayDay of Month, as integer, extracted from COMPLETED_DATE.
completed_week_of_yearWeek of the year, as integer, extracted from COMPLETED_DATE.
cau1Value of custom user type attributes configured on the instance represented by their reference names
cad1Value of custom date type attributes configured on the instance represented by their reference names
cas1Value of custom string type attributes configured on the instance represented by their reference names

Headers

Bearer token
Acceptapplication/json
Content-Typeapplication/json

Response

Parameters

The API returns the requested columns specified by returnColumns as output. If returnColumns is unspecified then all columns listed will be returned.

Examples

Request

curl -K -X GET  \
"https://instance.securid.com/aveksa/command.submit?cmd=findChangeRequests&format=json" \
"&returnColumns=id%2Cname%2Cdescription%2Ctype%2Ccurrent_state%2Csource_type%2Cnotes&returnMaxRows=10" \
-H "Authorization: Bearer <token>" \
-H "Content-Type: application/json"

Response

{
"findChangeRequests": [
{
"id": "43",
"name": "00043",
"description": "",
"type": "System",
"current_state": "Cancelled",
"source_type": "ExplicitAccess",
"notes": ""
},
{
"id": "221",
"name": "Rule:Attribute Synchronization_41:Doe, James1_jdoe_225186_00221",
"description": "Created from rule Attribute Synchronization",
"type": "System",
"current_state": "Completed",
"source_type": "RuleViolations",
"notes": "Created from rule Attribute Synchronization"
},
{
"id": "143",
"name": "00143",
"description": "",
"type": "System",
"current_state": "PendingVerification",
"source_type": "ExplicitAccess",
"notes": ""
},
{
"id": "64",
"name": "00063 [This is an automatically generated revocation request.]",
"description": "",
"type": "System",
"current_state": "ER",
"source_type": "ExplicitAccess",
"notes": ""
}
]
}