We are planning to create approximately 550 Roles (and similarly 550 Access Profiles) in SailPoint Identity Security Cloud (ISC) using the VS Code extension.
We would like to understand the expected behavior and best practices for this type of bulk operation.
Our questions are:
Is creating around 550 Roles/Access Profiles in a single batch a recommended approach?
Will this cause any performance degradation or slowness in the ISC tenant?
Will ISC create a separate background/Monitor task for each Role or Access Profile (i.e., around 300 Monitor tasks)?
Are there any recommended batch sizes or best practices to avoid API throttling or excessive background processing?
Does SailPoint provide any official documentation on bulk creation limits, performance considerations, or recommended practices for Roles and Access Profiles? If such documentation is available, could you please share the relevant links or knowledge base articles?
We appreciate any guidance or recommendations from anyone who has experience with large-scale imports.
Yes, I’ve created bulk access profiles & roles with no issues. If you intend to use the VSCode extension, I would batch them up into 100 per upload.
It should not, but it may take a little bit longer than usual to sync them once you run an “Apply Changes” and sync all identities to the roles.
No, the way the refresh works when you use “Apply Changes” is that it refreshes each identity and re-checks role assignment criteria. You will see a “mentos” queue item for these, but the queue should die down pretty quickly.
If you’re talking about a task for creation, then no, they will be created instantly.
There is a limit of 100 requests per 10 seconds, so you may want to batch them up depending on that.
None that I’m aware for this exact use case. The rate limiting page is general for all API calls including Role/AP creation. I’ve bulk created Roles/APs many times before and have not had any performance or issues of note.
Keep us updated though if you encounter any issues!
In my last project, we had to create roles in bulk, around 600-700 roles at a go. For this process, we have built a Ruby script to create the roles in bulk. You need to prepare a CSV file and then run the script. It creates the Role in the ISC tenant.
I have seen similar bulk operations using the VS Code extension, and my recommendation would be to avoid sending all 550 in a single batch. Breaking them into batches of around 50–100 makes it much easier to retry if something fails and is generally easier to monitor.
I also recommend validating a small batch first (for example, 10–20 Roles/Access Profiles) to confirm the JSON format, naming, and relationships before starting the larger import. It can save a lot of cleanup later if there’s a template issue.