Roles API
Create Reclamation Candidate
Flag an entitlement grant for reclamation now, on your own logic, without waiting for the inactivity sweep. If a reclamation policy is attached to the entitlement it opens a gated review; otherwise the access is reclaimed automatically. Returns the created reclamation.
POST
Create Reclamation Candidate
Authentication and permissions
Token requirements: User-based token (OAuth) or Organization-scoped API key or Team-scoped API key. Send a bearer access token for one of these identities. The permissions and resource restrictions below also apply.
Permissions joined by + are all required; or separates alternatives. Full-access keys still cannot call endpoints marked unsupported. Team keys must allow every team checked by the request. OAuth access depends on the user’s roles and resource access.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Body
application/json
Response
200 - application/json
Success
An reclamation-candidate reclamation: one entitlement grant flagged for review or reclaim because the user stopped signing in. References are bare IDs; resolve entitlement, app instance and user via their own endpoints.

