curl --request POST \
--url https://devx.{tenant}.oleria.io/v1/downloads \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"context": "accessInventoryIdentitiesV2"
}
'
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"context": "accessBundleApplications",
"fileFormat": "csv",
"status": "accepted",
"urlTtlMinutes": 2160,
"error": {
"code": "<string>",
"message": "<string>"
},
"url": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Downloads
Create a download request
Create an asynchronous export for a single resource type. The resource type is chosen by the
context field — see the context field below (DownloadContext) for the full list of
values and what each one exports. Returns a request id; poll GET /v1/downloads/{id} until the
status is completed to retrieve the presigned download URL.
POST
/
v1
/
downloads
curl --request POST \
--url https://devx.{tenant}.oleria.io/v1/downloads \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"context": "accessInventoryIdentitiesV2"
}
'
{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"context": "accessBundleApplications",
"fileFormat": "csv",
"status": "accepted",
"urlTtlMinutes": 2160,
"error": {
"code": "<string>",
"message": "<string>"
},
"url": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Body
application/json
Input object to create a download request
Selects which dataset the download request exports. The request and polling flow are identical for every value — only the returned data differs. The contexts below use the same catalog as the Working with Downloads guide, which also documents the filter and sort grammar.
| Group | context values | What it returns |
|---|---|---|
| Access Bundles | accessBundles, accessBundleDetails, accessBundleApplications, accessBundleGroups | Access bundle definitions and their assigned applications / groups. |
| Access Inventory | accessInventoryIdentitiesV2, accessInventoryEmployeesV2, accessInventoryNhiV2, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryGroupsV2, accessInventoryRolesV2, accessInventoryResourceInstancesV2 | Snapshots of who has access to what, by identity / account / group / role. |
| Identity & Employees | identities, employees, employeeAccessInsights, oleriaUsers | Canonical identity and HR records, plus per-employee access posture. |
| Utilization | accountUtilization, groupUtilizationAccounts | Activity-weighted views of how access is actually used. |
| Risk & Activity | risks, risksV2, riskMonitoringDetail, activityAnalysis | Detected risks, monitoring detail, and the raw activity log. |
| Identity Assessments | identityAssessmentRiskDownload, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentSimilarGroups | Periodic assessment outputs across entitlements and resources. |
| Identity Lifecycle (ILM) | ilmEmployeeEvents, ilmWorkflowEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions | Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one. |
| External Access | externalAccessUsers, externalAnonymousAccess, externalSharedAssets | Third-party users, anonymous shares, and externally shared assets. |
| Access Requests | accessRequests | Submitted access requests and their status. |
| Access Reviews | accessReviewsReviewItems | Review items from an access review campaign. |
| Reference | resourceInstances, unmanagedApplications, applicationAccounts, userGroup | Resource and application catalog data. |
oleriaUsers is an administrative context, not customer-facing identity data.
Available options:
accessBundleApplications, accessBundleDetails, accessBundleGroups, accessBundles, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryEmployeesV2, accessInventoryGroupsV2, accessInventoryIdentitiesV2, accessInventoryNhiV2, accessInventoryResourceInstancesV2, accessInventoryRolesV2, accessRequests, accessReviewsReviewItems, accountUtilization, activityAnalysis, applicationAccounts, customActionAccessRequests, directIntegrationAccessRequests, employeeAccessInsights, employees, externalAccessUsers, externalAnonymousAccess, externalSharedAssets, groupUtilizationAccounts, identities, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentRiskDownload, identityAssessmentSimilarGroups, ilmEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions, ilmWorkflowEmployeeEvents, oleriaUsers, resourceInstances, riskMonitoringDetail, risks, risksV2, unmanagedApplications, userGroup Selects the file format the download request exports. Defaults to csv when omitted.
Available options:
csv, jsonl Show child attributes
Show child attributes
Duration that the presigned download URL is valid in minutes. Defaults to 5 minutes if no value is given. Cannot be greater than 4320 minutes (3 days).
Required range:
1 <= x <= 4320Response
Download request created successfully
Tracks the status of a download request
Selects which dataset the download request exports. The request and polling flow are identical for every value — only the returned data differs. The contexts below use the same catalog as the Working with Downloads guide, which also documents the filter and sort grammar.
| Group | context values | What it returns |
|---|---|---|
| Access Bundles | accessBundles, accessBundleDetails, accessBundleApplications, accessBundleGroups | Access bundle definitions and their assigned applications / groups. |
| Access Inventory | accessInventoryIdentitiesV2, accessInventoryEmployeesV2, accessInventoryNhiV2, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryGroupsV2, accessInventoryRolesV2, accessInventoryResourceInstancesV2 | Snapshots of who has access to what, by identity / account / group / role. |
| Identity & Employees | identities, employees, employeeAccessInsights, oleriaUsers | Canonical identity and HR records, plus per-employee access posture. |
| Utilization | accountUtilization, groupUtilizationAccounts | Activity-weighted views of how access is actually used. |
| Risk & Activity | risks, risksV2, riskMonitoringDetail, activityAnalysis | Detected risks, monitoring detail, and the raw activity log. |
| Identity Assessments | identityAssessmentRiskDownload, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentSimilarGroups | Periodic assessment outputs across entitlements and resources. |
| Identity Lifecycle (ILM) | ilmEmployeeEvents, ilmWorkflowEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions | Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one. |
| External Access | externalAccessUsers, externalAnonymousAccess, externalSharedAssets | Third-party users, anonymous shares, and externally shared assets. |
| Access Requests | accessRequests | Submitted access requests and their status. |
| Access Reviews | accessReviewsReviewItems | Review items from an access review campaign. |
| Reference | resourceInstances, unmanagedApplications, applicationAccounts, userGroup | Resource and application catalog data. |
oleriaUsers is an administrative context, not customer-facing identity data.
Available options:
accessBundleApplications, accessBundleDetails, accessBundleGroups, accessBundles, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryEmployeesV2, accessInventoryGroupsV2, accessInventoryIdentitiesV2, accessInventoryNhiV2, accessInventoryResourceInstancesV2, accessInventoryRolesV2, accessRequests, accessReviewsReviewItems, accountUtilization, activityAnalysis, applicationAccounts, customActionAccessRequests, directIntegrationAccessRequests, employeeAccessInsights, employees, externalAccessUsers, externalAnonymousAccess, externalSharedAssets, groupUtilizationAccounts, identities, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentRiskDownload, identityAssessmentSimilarGroups, ilmEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions, ilmWorkflowEmployeeEvents, oleriaUsers, resourceInstances, riskMonitoringDetail, risks, risksV2, unmanagedApplications, userGroup Selects the file format the download request exports. Defaults to csv when omitted.
Available options:
csv, jsonl Available options:
accepted, completed, failed Duration that the presigned download URL is valid in minutes.
Required range:
1 <= x <= 4320Show child attributes
Show child attributes
A presigned URL to the S3 object containing the result data.