Create a download request

Authorizations

Authorization

string

header

required

The access token received from the authorization server in the OAuth 2.0 flow.

Body

application/json

Input object to create a download request

context

enum<string>

required

Selects which dataset the download request exports. The request and polling flow are identical for every value — only the returned data differs. The contexts below use the same catalog as the Working with Downloads guide, which also documents the filter and sort grammar.

Group	`context` values	What it returns
Access Inventory	`accessInventoryIdentitiesV2`, `accessInventoryEmployeesV2`, `accessInventoryNhiV2`, `accessInventoryAccounts`, `accessInventoryApplicationAccountsV2`, `accessInventoryApplicationInstancesV2`, `accessInventoryGroupsV2`, `accessInventoryRolesV2`, `accessInventoryResourceInstancesV2`	Snapshots of who has access to what, by identity / account / group / role.
Identity & Employees	`identities`, `employees`, `employeeAccessInsights`, `oleriaUsers`	Canonical identity and HR records, plus per-employee access posture.
Utilization	`accountUtilization`, `groupUtilizationAccounts`	Activity-weighted views of how access is actually used.
Risk & Activity	`risks`, `risksV2`, `riskMonitoringDetail`, `activityAnalysis`	Detected risks, monitoring detail, and the raw activity log.
Identity Assessments	`identityAssessmentRiskDownload`, `identityAssessmentEntitlementUtilization`, `identityAssessmentResourceInstanceUtilization`, `identityAssessmentSimilarGroups`	Periodic assessment outputs across entitlements and resources.
Identity Lifecycle (ILM)	`ilmEmployeeEvents`, `ilmWorkflowEmployeeEvents`, `ilmEventAccountActions`, `ilmEventApplicationActions`, `ilmEventGroupActions`	Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one.
External Access	`externalAccessUsers`, `externalAnonymousAccess`, `externalSharedAssets`	Third-party users, anonymous shares, and externally shared assets.
Access Requests	`accessRequests`	Submitted access requests and their status.
Reference	`resourceInstances`, `unmanagedApplications`, `applicationAccounts`, `userGroup`	Resource and application catalog data.

oleriaUsers is an administrative context, not customer-facing identity data.

Available options:

accessInventoryAccounts,

accessInventoryApplicationAccountsV2,

accessInventoryApplicationInstancesV2,

accessInventoryEmployeesV2,

accessInventoryGroupsV2,

accessInventoryIdentitiesV2,

accessInventoryNhiV2,

accessInventoryResourceInstancesV2,

accessInventoryRolesV2,

accessRequests,

accountUtilization,

activityAnalysis,

applicationAccounts,

employeeAccessInsights,

employees,

externalAccessUsers,

externalAnonymousAccess,

externalSharedAssets,

groupUtilizationAccounts,

identities,

identityAssessmentEntitlementUtilization,

identityAssessmentResourceInstanceUtilization,

identityAssessmentRiskDownload,

identityAssessmentSimilarGroups,

ilmEmployeeEvents,

ilmEventAccountActions,

ilmEventApplicationActions,

ilmEventGroupActions,

ilmWorkflowEmployeeEvents,

oleriaUsers,

resourceInstances,

riskMonitoringDetail,

risks,

risksV2,

unmanagedApplications,

userGroup

fileFormat

enum<string>

default:csv

Selects the file format the download request exports. Defaults to csv when omitted.

Available options:

csv,

jsonl

params

object

Show child attributes

downloadUrlTtlMinutes

integer

default:5

Duration that the presigned download URL is valid in minutes. Defaults to 5 minutes if no value is given. Cannot be greater than 4320 minutes (3 days).

Required range: 1 <= x <= 4320

Response

Download request created successfully

Tracks the status of a download request

string<uuid>

required

context

enum<string>

required

Group	`context` values	What it returns
Access Inventory	`accessInventoryIdentitiesV2`, `accessInventoryEmployeesV2`, `accessInventoryNhiV2`, `accessInventoryAccounts`, `accessInventoryApplicationAccountsV2`, `accessInventoryApplicationInstancesV2`, `accessInventoryGroupsV2`, `accessInventoryRolesV2`, `accessInventoryResourceInstancesV2`	Snapshots of who has access to what, by identity / account / group / role.
Identity & Employees	`identities`, `employees`, `employeeAccessInsights`, `oleriaUsers`	Canonical identity and HR records, plus per-employee access posture.
Utilization	`accountUtilization`, `groupUtilizationAccounts`	Activity-weighted views of how access is actually used.
Risk & Activity	`risks`, `risksV2`, `riskMonitoringDetail`, `activityAnalysis`	Detected risks, monitoring detail, and the raw activity log.
Identity Assessments	`identityAssessmentRiskDownload`, `identityAssessmentEntitlementUtilization`, `identityAssessmentResourceInstanceUtilization`, `identityAssessmentSimilarGroups`	Periodic assessment outputs across entitlements and resources.
Identity Lifecycle (ILM)	`ilmEmployeeEvents`, `ilmWorkflowEmployeeEvents`, `ilmEventAccountActions`, `ilmEventApplicationActions`, `ilmEventGroupActions`	Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one.
External Access	`externalAccessUsers`, `externalAnonymousAccess`, `externalSharedAssets`	Third-party users, anonymous shares, and externally shared assets.
Access Requests	`accessRequests`	Submitted access requests and their status.
Reference	`resourceInstances`, `unmanagedApplications`, `applicationAccounts`, `userGroup`	Resource and application catalog data.

oleriaUsers is an administrative context, not customer-facing identity data.

Available options:

accessInventoryAccounts,

accessInventoryApplicationAccountsV2,

accessInventoryApplicationInstancesV2,

accessInventoryEmployeesV2,

accessInventoryGroupsV2,

accessInventoryIdentitiesV2,

accessInventoryNhiV2,

accessInventoryResourceInstancesV2,

accessInventoryRolesV2,

accessRequests,

accountUtilization,

activityAnalysis,

applicationAccounts,

employeeAccessInsights,

employees,

externalAccessUsers,

externalAnonymousAccess,

externalSharedAssets,

groupUtilizationAccounts,

identities,

identityAssessmentEntitlementUtilization,

identityAssessmentResourceInstanceUtilization,

identityAssessmentRiskDownload,

identityAssessmentSimilarGroups,

ilmEmployeeEvents,

ilmEventAccountActions,

ilmEventApplicationActions,

ilmEventGroupActions,

ilmWorkflowEmployeeEvents,

oleriaUsers,

resourceInstances,

riskMonitoringDetail,

risks,

risksV2,

unmanagedApplications,

userGroup

fileFormat

enum<string>

default:csv

required

Selects the file format the download request exports. Defaults to csv when omitted.

Available options:

csv,

jsonl

status

enum<string>

required

Available options:

accepted,

completed,

failed

urlTtlMinutes

integer

required

Duration that the presigned download URL is valid in minutes.

Required range: 1 <= x <= 4320

error

object

Show child attributes

url

string

A presigned URL to the S3 object containing the result data.

Getting Started

Inventory & Actions

Action jobs

TrustFusion

Downloads

Authorizations

Body

Response