Aggregating Entitlements from CSV File Based on Plan ID

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello Sailpoint community,

I’m trying to aggregate account and entitlement information from a single CSV file into my Sailpoint account schema. However, I’m running into an issue where I’m only getting unique values of Role, but not referencing to Plan ID.

Here’s a sample of my CSV file:

UserId, LastName, FirstName, Email ID, Plan ID, Attribute
Abc, Last, First, [email protected], A, TeamWorkspace
Abc, Last, First, [email protected], A, ViewData
Abc, Last, First, [email protected], A, Upload file
Abc, Last, First, [email protected], B, TeamWorkspace
Abc, Last, First, [email protected], B, ViewData
Abc, Last, First, [email protected], B, Upload file

My account schema looks like this: [attach screenshot]

image
image1062×547 22.1 KB

I want to aggregate the entitlements (Roles) based on the Plan ID, so that I can properly assign the entitlements to an account. For example, for Plan ID A, I want to assign TeamWorkspace, ViewData, and Upload file entitlements to the account.

Can anyone help me with this? How can I achieve this in Sailpoint?

Expected Output:

For each account, I want to have a list of entitlements (Roles) that are specific to the Plan ID. For example:

  • Account: Abc. Last, First ([email protected])
    • Plan ID A: TeamWorkspace, ViewData, Upload file
    • Plan ID B: TeamWorkspace, ViewData, Upload file

Thank you for your help!

2

Hi Sita,

I believe you will need to restructure how you are defining the entitlements. I do not think you can link two separate attributes together to define unique entitlements. Some options I can think of below:

  • Entitlement attributes per plan
    • Your account schema would have an entitlement attribute per plan (PlanA Roles, PlanB Roles, etc). Then in your CSV you would specify TeamWorkspace, ViewData, etc under the appropriate plan attribute
  • One account entitlement attribute Plan - Role
    • Your entitlements would be named like Plan A - TeamWorkspace, Plan B - TeamWorkspace
  • Create an entitlement grouping structure
    • Plan A with all three roles is called a unique name vs Plan B with all three roles. Would need to create unique names for each combination

Thanks,

Liam

3

Hi Sita,

If I understand your requirement correctly you have configured Generic Flat File type connector? and as per the above sample csv. When you aggregate accounts your attribute field should populate three values as TeamWorkspace, ViewData, Upload file for plan id A. You don’t need a separate configuration to assign entitlements on the basis of plan ID if your csv file format is standard as above.

4

QQ: Is the current file format required to write-back to the application?