Add Access Profile Meta Data

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hi Community,

We have lot if Access profiles and want to add metadata on access profiles like if it is related to SOX etc.

As I see bulk Role upload utility does not support that feature to add access profile metadata, is there any other API to do this in bulk?

2

I don’t think there is an official API to bulk update metadata for Access Profiles at this time.

However, you can use Python or Ruby scripts to loop through your Access Profiles and PATCH their metadata individually using the /v3/access-profiles/{id} endpoint.

For sample script, please refer to:
Bulk update of access profiles | SailPoint Community

3

Hi @gourab ,

After reviewing the available SailPoint APIs, there is currently no dedicated API endpoint for bulk adding or updating metadata for access profiles.

The only bulk operation available for access profiles is through the
update-access-profiles-in-bulk endpoint, which allows updating the requestable field across multiple access profiles. However, this endpoint does not support metadata updates.

update-access-profiles-in-bulk | SailPoint Developer Community

While metadata bulk updates are supported for roles through the bulk-update-role-metadata.

You may explore the following endpoint from the Access Model Metadata API for experimentation:

This endpoint is designed to bulk update Access Model Metadata Attribute Values using a query. However, it’s important to note that this API is working in context of entitlements (I am not sure this will work).

If none works, contact SailPoint support to inquire about custom solutions or upcoming features that might address this need.

4

@gourab -
Use ISC’s Access Model Metadata APIs to tag Access Profiles (e.g., “SOX = Yes/No”) in bulk. SailPoint added Access Profile metadata + bulk management via API/UI recently, so you don’t have to rely on the CSV “Role upload” tool.
Reference - Enhancement: Access Profile Metadata Support

5

This is not possible with currently available APIs.
Access Model Metadata | SailPoint Developer Community
”This release of the API includes support for entitlement metadata. Support for role and access profile metadata will be introduced in a subsequent release.”

6

Thanks @sita_ram @GOKUL_ANANTH_M @abhimany_1 @amit_1140 for your responses. I raised an support ticket to sailpoint regarding this and they confirmed there is no APIs for this operation.

I am marking @sita_ram ‘s response as solution as he was first one to respond.