Bulk Create Entra ID Security Groups through IIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

Version 8.3

Share all details related to your problem, including any error messages you may have received.

Is it possible to bulk create security groups in Entra ID through IIQ? We have 40 new roles to create and need to create corresponding security groups in Entra ID for them. We are willing to pursue alternatives like powershell if someone already has a script.

2

Doing this now for a customer with teams. Azure connector can do group provisioning. Just call the Entitlement Update workflow and create your provisioning plan for your groups (ObjectRequests)

1 Like
3

Hi @mer21,

If there is some specific business-use that you want to achieve, then you may use custom task to create groups in bulk.

Let me know if you need further help.

Thanks

4

@phodgdon

Hi Paul,

Is there something that needs to be done on the application to be able to create groups in Azure? We have our application setup with groupProvisioning set to true and we are able to aggregate groups in from Azure. When I created the following provisioning plan and launched the Entitlement Update workflow, I got a success back as the completion status of the workflow, but no provisioning transaction for Azure.

<ProvisioningPlan>
  <ObjectRequest application="AZURE" nativeIdentity="IIQ-CONTROL-TEST-SQLRL2" op="Create" type="Group">
    <AttributeRequest name="displayName" op="Add" value="IIQ-CONTROL-TEST-SQLRL2"/>
    <AttributeRequest name="securityEnabled" op="Add" value="true"/>
  </ObjectRequest>
  <Requesters>
    <Reference class="sailpoint.object.Identity" id="0a9128157ae21a16727ae8010d161ad8" name="9xxxxxxx"/>
  </Requesters>
</ProvisioningPlan>
5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.