Active Directory Create Group Policy

IdentityIQ (IIQ) IIQ Discussion and Questions
1

IIQ-8.3 p5

I am trying to create a group in the AD from application with the of provisioning plan, so I wrote a rule and added the required details as mentioned in the AD app, but the group is not getting created in the AD, even though the plan is working fine.

<?xml version='1.0' encoding='UTF-8'?> 
import sailpoint.object.ProvisioningPlan;
import sailpoint.object.ProvisioningPlan.AccountRequest;
import sailpoint.object.ProvisioningPlan.AttributeRequest;

ProvisioningPlan plan = new ProvisioningPlan();

AccountRequest acctReq = new AccountRequest();
acctReq.setApplication("Active_Directory_App");
acctReq.setOperation(AccountRequest.Operation.Create);
acctReq.setType("group"); 

AttributeRequest dnAttr = new AttributeRequest("distinguishedName", ProvisioningPlan.Operation.Set,"CN=Test_ad_group,OU=QA USERS,DC=seri,DC=sailpointdemo,DC=com");

AttributeRequest samAttr = new AttributeRequest("sAMAccountName",ProvisioningPlan.Operation.Set,"Test-ad-sp");

acctReq.add(dnAttr);
acctReq.add(samAttr);

plan.add(acctReq);

return plan;
2

@srikanth07

Instead of AccountRequest use ObjectRequest.

snap shot of code which will help you.

==========================

    ProvisioningPlan.ObjectRequest objectRequest = new ProvisioningPlan.ObjectRequest();
    
    objectRequest.setApplication(OKTA_NAME);
    objectRequest.setNativeIdentity(cn);
    objectRequest.setOp(ProvisioningPlan.ObjectOperation.Create);
    objectRequest.setType("group");
    objectRequest.add(new ProvisioningPlan.AttributeRequest("name", ProvisioningPlan.Operation.Set, cn));
    
    // add description if it exists
    String description = getLdapGroupDescription(ldap, group);
    
    if ( Util.isNotNullOrEmpty(description) ) {
      objectRequest.add(new ProvisioningPlan.AttributeRequest("description", ProvisioningPlan.Operation.Set, description));
    }
    
    plan.add(objectRequest);
3

you are using AccountRequest instead of that ProvisioningPlan.ObjectRequest use this.