Roles API
List Reclamation Candidates
List a team’s reclamation-candidate reclamations — entitlement grants flagged for review or reclaim because the user stopped signing in. Filter by status, app instance, or a name search. The response also carries the team-wide reclaimed/dismissed tally shown on the roles page.
GET
List Reclamation Candidates
Authentication and permissions
Token requirements: User-based token (OAuth) or Organization-scoped API key or Team-scoped API key. Send a bearer access token for one of these identities. The permissions and resource restrictions below also apply.
Permissions joined by + are all required; or separates alternatives. Full-access keys still cannot call endpoints marked unsupported. Team keys must allow every team checked by the request. OAuth access depends on the user’s roles and resource access.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Query Parameters
The lifecycle state of an reclamation-candidate reclamation, derived server-side.
Available options:
RECLAMATION_CANDIDATE_STATUS_UNSPECIFIED, RECLAMATION_CANDIDATE_STATUS_IN_REVIEW, RECLAMATION_CANDIDATE_STATUS_RECLAIMING, RECLAMATION_CANDIDATE_STATUS_REVIEW_DISMISSED, RECLAMATION_CANDIDATE_STATUS_REVIEW_RECLAIMED, RECLAMATION_CANDIDATE_STATUS_AUTO_RECLAIMED, RECLAMATION_CANDIDATE_STATUS_RECLAIM_FAILED Scope to these app instances (integrations). Empty selects every one.
Case-insensitive substring match on the entitlement or resource name.

