Can I update “Manager” attribute in SailPoint ISC using Rest API ? Is there any API to update values on Identity Attributes in SailPoint ISC ?
Thanks
Why break away from an authoritative source’s data-driven flow?
There is a specifc requirement. We need to update Identity attribute value. If we can’t update manager , we can use any other attribute.
It is not possible to update Identity data, there is no API even to update Identity.
You can have a different source, use Correlation Rule to calculate the manager.
Looking at this “specific requirement”, you need to question if this is a technical debt you want to incur. Using a tool, any tool, beyond what it’s meant for has a cost. Not every requirement is a good requirement. And generally speaking, manager information not in HR or authoritative source means you have process-level complexity, maybe one that has an opportunity to be optimized / streamline.
HR has had 50 years to mature, IGA has had 20+ years to mature. It should be approaching a level of maturity where minimal customizations are needed. All the use cases have 20 years to flushed out and pulled into IGA solutions as best practices.
To put it simply, have the right tool, do the right thing, go through proper channels.
Now, if you MUST stick to the requirement of update manager using API, and / or any other identity attribute, you can do what Krishna suggested, with an additional source. Or, the other approach is to have “identity-specific override lookup transform”. Each identity can have up to one override lookup transform. In it, you can store the override value(s). In the identity profile that currently exist, you need to create a transform to look up first valid against the override table, if not found, then use the HR source data (of that specific attribute). The API you’ll be using is a transform update API, i.e. you’ll be updating the override lookup table / transform object. This avoids having another source configuration, and gives you an existing OOTB API to affect /update the identity attribute this way.
And the reason to have identity-specific override lookup (as opposed to storing every override value of everyone in the same transform) is to keep the transform small, light to update, light to lookup. Plus, Transforms have a 400KB limit.
Update Transform API: update-transform | SailPoint Developer Community
Lookup Transform: Lookup | SailPoint Developer Community
p.s. Not saying it’s a good idea though as it creates a rather long list of Transforms in the Identity Profile mappings dropdown list. hum…like a whole 2000±Tranforms dropdown list:
Thanks @KRM7 . I was looking to update Identity in the workflow. I got the answer now.
Glad you went with updating the source (ideally, the same source), the proper channel, otherwise that means the landscape now has this additional ‘system’ (even if it’s a CSV) to manage on the side.
I haven’t updated anything. I only wanted to know if there is any API that can update Identity attribute values. The answer is No.
Ah, my bad. I looked too much into it (e.g. why the question exist.).