Create Bulk Roles in ISC

[Shivakarasani455 (Shiva Karasani)]

Hello Community,

Can we create bulk roles in ISC via API/ Postman or any other recommended way? We have requirement to create 100+ Roles in our environment.

[Gopi2000 (Gopi S)]

you can able to acheive bulk import using any one of the below options

https://community.sailpoint.com/t5/IdentityNow-Forum/SailPoint-IdentityNow-PowerShell-Module/td-p/144188

Creation of a bulk number of roles and the validity of each role

Yes you can use powershell script to call APIs for creating access profiles and roles in bulk. https://community.sailpoint.com/t5/IdentityNow-Forum/SailPoint-IdentityNow-PowerShell-Module/td-p/144188 For this use case you can define a flag as Identity attribute which should be true from start date to end date and false otherwise. So now when you define your role include this identity attribute as one of the role criteria and assign the role only when this flag is true.

Bulk Role create using script

Hello All, Good day, I am trying to create Bulk roles and role assignment using CSV, where I followed below steps, But when I tried to run the ruby script, I am facing thebelow issue. C:/Ruby33-x64/lib/ruby/3.3.0/net/http.rb:1603:in initialize': Failed to open TCP connection to xxxx.api.identitynow.com:443 (getaddrinfo: No such host is known. ) (Socket::ResolutionError) from C:/Ruby33-x64/lib/ruby/3.3.0/net/http.rb:1603:in open’ from C:/Ruby33-x64/lib/ruby/3.3.0/net/http.rb:1603:in b…

[Arshad (Arshad Moghul)]

@Shivakarasani455

Can we create bulk roles in ISC via API/ Postman or any other recommended way? We have requirement to create 100+ Roles in our environment.

@Shivakarasani455 You can use the SailPoint provided bulk role importer utility to achieve this. All you would have to do is prepare a CSV template as mentioned in this documentation and supply it to the script for execution to import it into your tenant as a one time load. It is much flexible as you can set/update all the flags on the role object using this.

https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-Access-Profile-and-Role-Importer/ta-p/77382

[ethompson (Edward Thompson)]

You can also try the VSCode extension which has an import/export to CSV function.

SailPoint Identity Security Cloud - Visual Studio Marketplace

[Shivakarasani455 (Shiva Karasani)]

@Arshad @ethompson Thanks for your response. I’ve been using the Ruby script method to create roles, but I’m running into issues with the roleOwner field. The script keeps returning an error saying it either can’t find the owner or has found multiple matches. I’m not sure what criteria it’s using to identify the owner — I’ve tried several different names without success

Can you please suggest where i am going wrong, attaching screenshot of error and file used for createRole.

Thanks

[Arshad (Arshad Moghul)]

@Shivakarasani455

running into issues with the roleOwner field

@Shivakarasani455 In the roleOwner field, you need to provide the SailPoint Username (uid) value of the identity which is a unique value. That’s what the script accepts.

[Shivakarasani455 (Shiva Karasani)]

Hi @Arshad No luck with username as well. I have tried ID, Username, Email, Account Name fields

[Arshad (Arshad Moghul)]

@Shivakarasani455

username

the naming convention is not so great at places within the system. In identity profile, it shows as SailPoint Username (uid) whereas on the identity cube, the same value is populated under “Account Name” field.

As I can see in your screenshot, try to have account name value 1115003 as the roleOwner value in the CSV feed. I’ve run the bulk role importer script multiple times the same way and never faced any challenges with the roleOwner.

[Shivakarasani455 (Shiva Karasani)]

Thanks for the response @Arshad

The script filter is looking for alias attribute, which is not part of our org setup, hence not able to detect any attribute.

I had to take postman runner approach for bulk creation.

thanks