# Bundle Management Plugin

**URL:** <https://developer.sailpoint.com/discuss/t/bundle-management-plugin/9731>\
**Category:** IIQ Discussion and Questions\
**Tags:** plugins\
**Created:** [March 27, 2023, 2:55pm UTC](https://developer.sailpoint.com/discuss/t/bundle-management-plugin/9731 "2023-03-27T14:55:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![yunusbayhanDH](https://avatars.discourse-cdn.com/v4/letter/y/ea666f/32.png) [@yunusbayhanDH](https://developer.sailpoint.com/discuss/u/yunusbayhanDH)\
**Post date:** [March 27, 2023, 2:55pm UTC](https://developer.sailpoint.com/discuss/t/bundle-management-plugin/9731/1 "2023-03-27T14:55:12Z")

</div>

Hi all,

We plan to implement a bundle (it-role/business-role) management plugin.

Our aim is to expose a bunch of endpoints to allow application owners to update roles in Sailpoint IIQ.

The problem is that we had several incidents in the production environment related to the assignment rule/bundle caching issues.

I have concerns related to IIQ caching in a clustered environment.

- Did someone manage to implement similar functionality successfully?
- Is it possible to update the it-role /business role while the refresh task or aggregation is running?
- Is there a way to force remove the bundle cache from instance-2 when the bundle is updated/removed on IIQ instance-1?

Implementation details;

Basically, we will expose the following endpoints

| URL | Method | Description |
| --- | --- | --- |
| …baseURL/identity/plugin/rest/{pluginName}/application/{applicationName}/role | GET | Get all it-role and business roles by application |
| …baseURL/identity/plugin/rest/{pluginName}/application/{applicationName}/role | POST | Save bundles in batch |
| …baseURL/identity/plugin/rest/{pluginName}/application/{applicationName}/role/{roleName} | GET | Get details of a bundle |
| …baseURL/identity/plugin/rest/{pluginName}/application/{applicationName}/role/{roleName} | POST | Save a bundles |

Environment: Sailpoint IIQ 8.3.1, Java 11, Clustered environment (multiple tasks and UI servers).

---

<div class="post-metadata">

**Author:** ![mikechung](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mikechung/32/36607_2.png) [@mikechung](https://developer.sailpoint.com/discuss/u/mikechung)\
**Post date:** [May 5, 2023, 9:35am UTC](https://developer.sailpoint.com/discuss/t/bundle-management-plugin/9731/2 "2023-05-05T09:35:29Z")

</div>

> [@yunusbayhanDH](#):
>
> Environment: Sailpoint IIQ 8.3.1, Java 11, Clustered environment (multiple tasks and UI servers).

Hello @yunusbayhanDH,

My understanding is that IIQ handles its cache smartly. So in my experience, you can of course update the Role during Identity Refresh. Additional the suggestion is to also using Role Propagation, within your plugin, the sample code to create the RoleChangeEvent is below:

```auto
RoleUtils.populateRoleChangeEvents(context, role); 

```

Therefore, we can make sure even if the role has been changed during the identity refresh Role Propagation will evaulate the assignments again on the identity.

And if you want to force decahe any object on the server, then you can also run the code:

```auto
context.decache(); // clear all cache
context.decache(role); // decache the role object

```

But normally, in the code, we always use context.getObjectByName() to retrieve the object from database. That means if any change commited from another server to DB, we can always retrieve the updated object at that point.

Hope this resolve your issue.

Besides, to save some development effort, you may also re-use the api call list in the documenation:  
[https://developer.sailpoint.com/iiq/api/roles](https://developer.sailpoint.com/iiq/api/roles)

Best regards,  
Mike

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:26pm UTC](https://developer.sailpoint.com/discuss/t/bundle-management-plugin/9731/3 "2023-07-19T14:26:00Z")

</div>