curl --request GET \
--url https://devx.{tenant}.oleria.io/v1/downloads/{id} \
--header 'Authorization: Bearer <token>'import requests
url = "https://devx.{tenant}.oleria.io/v1/downloads/{id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://devx.{tenant}.oleria.io/v1/downloads/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://devx.{tenant}.oleria.io/v1/downloads/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://devx.{tenant}.oleria.io/v1/downloads/{id}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://devx.{tenant}.oleria.io/v1/downloads/{id}")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://devx.{tenant}.oleria.io/v1/downloads/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"context": "accessBundleApplications",
"fileFormat": "csv",
"status": "accepted",
"urlTtlMinutes": 2160,
"error": {
"code": "<string>",
"message": "<string>"
},
"url": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Get a download request
Poll the status of a download request by id. While processing, status is accepted.
When status is completed, the response includes a presigned url to the CSV result.
On failure, status is failed and error is populated.
curl --request GET \
--url https://devx.{tenant}.oleria.io/v1/downloads/{id} \
--header 'Authorization: Bearer <token>'import requests
url = "https://devx.{tenant}.oleria.io/v1/downloads/{id}"
headers = {"Authorization": "Bearer <token>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
fetch('https://devx.{tenant}.oleria.io/v1/downloads/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://devx.{tenant}.oleria.io/v1/downloads/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://devx.{tenant}.oleria.io/v1/downloads/{id}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://devx.{tenant}.oleria.io/v1/downloads/{id}")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://devx.{tenant}.oleria.io/v1/downloads/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"context": "accessBundleApplications",
"fileFormat": "csv",
"status": "accepted",
"urlTtlMinutes": 2160,
"error": {
"code": "<string>",
"message": "<string>"
},
"url": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Path Parameters
ID in UUID format for a download request
Response
Download request found successfully
Tracks the status of a download request
Selects which dataset the download request exports. The request and polling flow are identical for every value — only the returned data differs. The contexts below use the same catalog as the Working with Downloads guide, which also documents the filter and sort grammar.
| Group | context values | What it returns |
|---|---|---|
| Access Bundles | accessBundles, accessBundleDetails, accessBundleApplications, accessBundleGroups | Access bundle definitions and their assigned applications / groups. |
| Access Inventory | accessInventoryIdentitiesV2, accessInventoryEmployeesV2, accessInventoryNhiV2, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryGroupsV2, accessInventoryRolesV2, accessInventoryResourceInstancesV2 | Snapshots of who has access to what, by identity / account / group / role. |
| Identity & Employees | identities, employees, employeeAccessInsights, oleriaUsers | Canonical identity and HR records, plus per-employee access posture. |
| Utilization | accountUtilization, groupUtilizationAccounts | Activity-weighted views of how access is actually used. |
| Risk & Activity | risks, risksV2, riskMonitoringDetail, activityAnalysis | Detected risks, monitoring detail, and the raw activity log. |
| Identity Assessments | identityAssessmentRiskDownload, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentSimilarGroups | Periodic assessment outputs across entitlements and resources. |
| Identity Lifecycle (ILM) | ilmEmployeeEvents, ilmWorkflowEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions | Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one. |
| External Access | externalAccessUsers, externalAnonymousAccess, externalSharedAssets | Third-party users, anonymous shares, and externally shared assets. |
| Access Requests | accessRequests | Submitted access requests and their status. |
| Access Reviews | accessReviewsReviewItems | Review items from an access review campaign. |
| Reference | resourceInstances, unmanagedApplications, applicationAccounts, userGroup | Resource and application catalog data. |
oleriaUsers is an administrative context, not customer-facing identity data.
accessBundleApplications, accessBundleDetails, accessBundleGroups, accessBundles, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryEmployeesV2, accessInventoryGroupsV2, accessInventoryIdentitiesV2, accessInventoryNhiV2, accessInventoryResourceInstancesV2, accessInventoryRolesV2, accessRequests, accessReviewsReviewItems, accountUtilization, activityAnalysis, applicationAccounts, customActionAccessRequests, directIntegrationAccessRequests, employeeAccessInsights, employees, externalAccessUsers, externalAnonymousAccess, externalSharedAssets, groupUtilizationAccounts, identities, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentRiskDownload, identityAssessmentSimilarGroups, ilmEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions, ilmWorkflowEmployeeEvents, oleriaUsers, resourceInstances, riskMonitoringDetail, risks, risksV2, unmanagedApplications, userGroup Selects the file format the download request exports. Defaults to csv when omitted.
csv, jsonl accepted, completed, failed Duration that the presigned download URL is valid in minutes.
1 <= x <= 4320Show child attributes
Show child attributes
A presigned URL to the S3 object containing the result data.

