Create Monitor

Create a new conflict monitor for defining a Separation of Duty rule. Entitlement sets are bound separately via AppEntitlementMonitorBindingService.

POST /api/v1/accessconflict

CreateMonitor

Go

package main

import(
	"context"
	"github.com/conductorone/conductorone-sdk-go/pkg/models/shared"
	conductoronesdkgo "github.com/conductorone/conductorone-sdk-go"
	"log"
)

func main() {
    ctx := context.Background()

    s := conductoronesdkgo.New(
        conductoronesdkgo.WithSecurity(shared.Security{
            BearerAuth: "<YOUR_BEARER_TOKEN_HERE>",
            Oauth: "<YOUR_OAUTH_HERE>",
        }),
    )

    res, err := s.AccessConflict.CreateMonitor(ctx, nil)
    if err != nil {
        log.Fatal(err)
    }
    if res.ConflictMonitor != nil {
        // handle response
    }
}

200

{
  "createdAt": "2023-11-07T05:31:56Z",
  "deletedAt": "2023-11-07T05:31:56Z",
  "description": "<string>",
  "displayName": "<string>",
  "enabled": true,
  "entitlementSetAId": "<string>",
  "entitlementSetBId": "<string>",
  "id": "<string>",
  "notificationConfig": {
    "emailNotifications": {
      "enabled": true,
      "identityUserIds": [
        "<string>"
      ]
    },
    "slackNotifications": {
      "channelId": "<string>",
      "channelName": "<string>",
      "enabled": true
    }
  },
  "updatedAt": "2023-11-07T05:31:56Z"
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization · string · header · required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

The request message for creating a new conflict monitor.

displayName · string · required

The human-readable name for the conflict monitor.

description · string | null

An optional description explaining the purpose of this Separation of Duty rule.

notificationConfig · Notification Config · object

The NotificationConfig message.

Show child attributes

Response

200 - application/json

A conflict monitor defines a Separation of Duty rule between two entitlement sets. It detects when any user holds entitlements from both set A and set B simultaneously.

A conflict monitor defines a Separation of Duty rule between two entitlement sets. It detects when any user holds entitlements from both set A and set B simultaneously.

createdAt · string<date-time> | null

deletedAt · string<date-time> | null

description · string | null

A description explaining the purpose of this Separation of Duty rule.

displayName · string | null

The human-readable name of the conflict monitor.

enabled · boolean | null

Whether the conflict monitor is actively scanning for violations.

entitlementSetAId · string | null

The identifier of entitlement set A in the conflict rule.

entitlementSetBId · string | null

The identifier of entitlement set B in the conflict rule.

id · string | null

The unique identifier of this conflict monitor.

notificationConfig · Notification Config · object

The NotificationConfig message.

Show child attributes

updatedAt · string<date-time> | null