Added Added REST API endpoint POST /v1/campaigns to create access review campaigns; one-off campaigns reject schedule-only fields ( cron_expression , recurring_duration_days ) Added REST API endpoint PUT /v1/campaigns/{campaign_id} to update an existing access review campaign, including schedule fields on recurring templates Added type: ACCESS_PATH support to POST /v1/queries/run , enabling principal→entitlement path results in addition to NODE queries Added OpalQuery filter to filter groups and resources by their admin owner Improved Access Campaign scoping now supports advanced access filter