Create a download request
Create an asynchronous export for a single resource type. The resource type is chosen by the
context field — see the context field below (DownloadContext) for the full list of
values and what each one exports. Returns a request id; poll GET /v1/downloads/{id} until the
status is completed to retrieve the presigned download URL.
Authorizations
The access token received from the authorization server in the OAuth 2.0 flow.
Body
Input object to create a download request
Selects which dataset the download request exports. The request and polling flow are identical for every value — only the returned data differs. The contexts below use the same catalog as the Working with Downloads guide, which also documents the filter and sort grammar.
| Group | context values | What it returns |
|---|---|---|
| Access Inventory | accessInventoryIdentitiesV2, accessInventoryEmployeesV2, accessInventoryNhiV2, accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryGroupsV2, accessInventoryRolesV2, accessInventoryResourceInstancesV2 | Snapshots of who has access to what, by identity / account / group / role. |
| Identity & Employees | identities, employees, employeeAccessInsights, oleriaUsers | Canonical identity and HR records, plus per-employee access posture. |
| Utilization | accountUtilization, groupUtilizationAccounts | Activity-weighted views of how access is actually used. |
| Risk & Activity | risks, risksV2, riskMonitoringDetail, activityAnalysis | Detected risks, monitoring detail, and the raw activity log. |
| Identity Assessments | identityAssessmentRiskDownload, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentSimilarGroups | Periodic assessment outputs across entitlements and resources. |
| Identity Lifecycle (ILM) | ilmEmployeeEvents, ilmWorkflowEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions | Joiner / mover / leaver events, the workflows they triggered, and the per-event account / application / group provisioning actions performed for each one. |
| External Access | externalAccessUsers, externalAnonymousAccess, externalSharedAssets | Third-party users, anonymous shares, and externally shared assets. |
| Access Requests | accessRequests | Submitted access requests and their status. |
| Reference | resourceInstances, unmanagedApplications, applicationAccounts, userGroup | Resource and application catalog data. |
oleriaUsers is an administrative context, not customer-facing identity data.
accessInventoryAccounts, accessInventoryApplicationAccountsV2, accessInventoryApplicationInstancesV2, accessInventoryEmployeesV2, accessInventoryGroupsV2, accessInventoryIdentitiesV2, accessInventoryNhiV2, accessInventoryResourceInstancesV2, accessInventoryRolesV2, accessRequests, accountUtilization, activityAnalysis, applicationAccounts, employeeAccessInsights, employees, externalAccessUsers, externalAnonymousAccess, externalSharedAssets, groupUtilizationAccounts, identities, identityAssessmentEntitlementUtilization, identityAssessmentResourceInstanceUtilization, identityAssessmentRiskDownload, identityAssessmentSimilarGroups, ilmEmployeeEvents, ilmEventAccountActions, ilmEventApplicationActions, ilmEventGroupActions, ilmWorkflowEmployeeEvents, oleriaUsers, resourceInstances, riskMonitoringDetail, risks, risksV2, unmanagedApplications, userGroup