# Bundle Profile relationship table(Entitlement - Role relationship)

**URL:** <https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128>\
**Category:** IIQ Discussion and Questions\
**Tags:** roles, identityiq\
**Created:** [July 23, 2026, 6:50am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128 "2026-07-23T06:50:23Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![avarshney9871](https://avatars.discourse-cdn.com/v4/letter/a/4bbf92/32.png) [@avarshney9871](https://developer.sailpoint.com/discuss/u/avarshney9871)\
**Post date:** [July 23, 2026, 6:50am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/1 "2026-07-23T06:50:23Z")

</div>

## Hi All,

Looking for your help!  
We have an entitlement, which is a part of role. Entitlement is visible inside role. Associated Roles are not visible in the SailPoint IdentityIQ UI when viewing entitlements, despite entitlement is a part of the role. This relationship does not exist inside the Bundle-profile relationship table.

Kindly share the root cause and work around.

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [July 23, 2026, 7:21am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/2 "2026-07-23T07:21:28Z")

</div>

Hello Anubhav. First, please confirm whether the entitlement is directly defined in that role’s own profile or comes through a required, permitted, or inherited role. The [Associated Roles tab](https://documentation.sailpoint.com/identityiq/help/application_management/entitlement_catalog.html#associated-roles-tab) only shows roles that directly provision the entitlement. If the entitlement is inherited through another role in the hierarchy, the parent role will not appear there.

If it is directly defined in the role profile, you can check and rebuild the relationship from the [IIQ console](https://documentation.sailpoint.com/identityiq/help/iiq_console/common_commands.html):

```auto
rolerelationship show -role_name 'Your Role Name'
rolerelationship index build -role_name 'Your Role Name'
rolerelationship show -role_name 'Your Role Name'

```

Pay attention to the status in the output. `ENT_NOTFOUND` means the referenced entitlement cannot be resolved, while `APP_NOTFOUND` means the application cannot be found. Either status indicates that the role profile cannot be resolved correctly and can explain why the association is not displayed in the UI.

You can also run the [Role-Entitlement Associations](https://documentation.sailpoint.com/identityiq/help/tasks/task_types/role_ent_association.html) task from Setup \> Tasks to rebuild all associations at once.

If the association still does not appear, export the Bundle XML and verify that the profile references the correct application, schema attribute, and exact entitlement value. If the corresponding ManagedAttribute no longer exists, run the appropriate account or group aggregation so IIQ can recreate it, then rebuild the relationship. If the entitlement has been retired, remove it from the role profile instead.

---

<div class="post-metadata">

**Author:** ![avarshney9871](https://avatars.discourse-cdn.com/v4/letter/a/4bbf92/32.png) [@avarshney9871](https://developer.sailpoint.com/discuss/u/avarshney9871)\
**Post date:** [July 23, 2026, 8:25am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/3 "2026-07-23T08:25:29Z")

</div>

Thanks harish, Entitlement is directly defined in the role profile.  
After all the defined process above, Role still does not appear in Entitlement

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [July 23, 2026, 8:56am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/4 "2026-07-23T08:56:42Z")

</div>

Since rebuilding did not fix it, could you try running it with the Bundle ID and share the complete output?

```auto
rolerelationship index build -role_name <Bundle_ID>
rolerelationship show -role_name <Bundle_ID>

```

The status column in the `show` output will tell us whether IIQ can resolve the entitlement or not. If it shows `ENT_NOTFOUND` or `APP_NOTFOUND`, the profile references something IIQ cannot match. If it shows `OK` but the Associated Roles tab is still empty, the issue is on the UI side.

Could you also share your IIQ version and patch level, and a sanitized copy of the Bundle profile XML?

---

<div class="post-metadata">

**Author:** ![avarshney9871](https://avatars.discourse-cdn.com/v4/letter/a/4bbf92/32.png) [@avarshney9871](https://developer.sailpoint.com/discuss/u/avarshney9871)\
**Post date:** [July 23, 2026, 9:02am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/5 "2026-07-23T09:02:35Z")

</div>

how can we check using the bundle\_profile\_relation table in DB.

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [July 23, 2026, 9:24am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/6 "2026-07-23T09:24:26Z")

</div>

Sure. You can try checking it with this read-only query:

```auto
SELECT
    b.name AS role_name,
    sb.name AS source_role_name,
    a.name AS application_name,
    bpr.*
FROM spt_bundle_profile_relation bpr
LEFT JOIN spt_bundle b ON b.id = bpr.bundle_id
LEFT JOIN spt_bundle sb ON sb.id = bpr.source_bundle_id
LEFT JOIN spt_application a ON a.id = bpr.source_application
WHERE bpr.bundle_id = '<BUNDLE_ID>';

```

Check for a row matching the exact application, attribute, and entitlement value in the role profile. If no matching row exists, the relationship was not created. If it exists but the Associated Roles tab is still empty, please share the row and your IIQ version and patch level.

Use the query only for verification. Do not update the table directly.

---

<div class="post-metadata">

**Author:** ![avarshney9871](https://avatars.discourse-cdn.com/v4/letter/a/4bbf92/32.png) [@avarshney9871](https://developer.sailpoint.com/discuss/u/avarshney9871)\
**Post date:** [July 23, 2026, 9:46am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/7 "2026-07-23T09:46:51Z")

</div>

That is the actual problem, Entitlement is not returning from Bundle profile relation table.  
So some of entitlement. I am using version 8.4

Is there any other way around to check this data using any other IIQ table?

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [July 23, 2026, 10:09am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/8 "2026-07-23T10:09:15Z")

</div>

You can verify the role profile from `spt_profile` and `spt_profile_constraints`:

```auto
SELECT
    b.name AS role_name,
    p.id AS profile_id,
    pc.elt AS profile_constraint
FROM spt_bundle b
JOIN spt_profile p ON p.bundle_id = b.id
JOIN spt_profile_constraints pc ON pc.profile = p.id
WHERE b.id = '<BUNDLE_ID>';

```

Check whether `profile_constraint` contains the entitlement value. These tables store the actual role profile definition, while `spt_bundle_profile_relation` is the generated association index used by Associated Roles. There is no other table that replaces it for this relationship.

If the entitlement exists here but is still missing from `spt_bundle_profile_relation` after rebuilding, could you share the task result and your exact 8.4 patch level?

---

<div class="post-metadata">

**Author:** ![avarshney9871](https://avatars.discourse-cdn.com/v4/letter/a/4bbf92/32.png) [@avarshney9871](https://developer.sailpoint.com/discuss/u/avarshney9871)\
**Post date:** [July 27, 2026, 6:11am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/9 "2026-07-27T06:11:46Z")

</div>

Thank you Harish for sharing the solution, this solution is working for fetching using DB

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [September 25, 2026, 6:11am UTC](https://developer.sailpoint.com/discuss/t/bundle-profile-relationship-table-entitlement-role-relationship/217128/10 "2026-09-25T06:11:51Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
