Request access to a resource

POST 
/access-requests

Creates an access request for a resource. The caller must provide role_id and have the required role authorization for the specified resource type. The resource must exist and be active. Requests are rejected if the caller already has equal or higher access or if a request is already pending. Dataset and domain requests may require domain or tenant access to be requested as part of the operation. On success, the response includes Message and RequestId.

Request

Responses

200

Access request created. Message is "Successfully raised the request for {resource_type}." RequestId is the new or reused UUID.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

400

Validation or authorization failure. Body is {"Message": " - "}. Common codes: IPV-1008 (missing required keys), IPV-1041 (invalid ResourceType), IPV-1004 (AdditionalParams for datasets/domains), IPV-1002 (resource not found), GE-1034 (inactive resource), ACR-1001 (already have access), ACR-1002 (pending request), AUTH-1003 (missing domain or tenant access).

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers

500

Backend failure. Body is {"Message": " - "} (typically GE-1085 via EMF-1001). Also possible if DynamoDB write fails and response is unbound.

Response Headers

Access-Control-Allow-Origin
Access-Control-Allow-Methods
Access-Control-Allow-Headers