Deleting Access Profiles and Roles in Bulk

[sahincelik]

Hi all,

I was wondering if there is a method to delete all access profiles and roles simultaneously using an API or another solution. The current API restricts deletions to 50 access profiles at a time, which is not practical for our needs. We will be testing the migration of thousands of IT roles from IIQ to IDN, and we need to clear all access profiles in our sandbox environment during these tests. Thanks in advance!

delete-access-profiles-in-bulk | SailPoint Developer Community

[dylanfoggan]

Hi @sahincelik ,

What I would suggest, since you have an IIQ environment is to create a Run Rule task.

1. Retrieve first the list of 50 Access Profiles in the SandBox environment
2. Add the Access Profile ID’s to a list to use in the Body of the Bulk Delete Request

You can add an Iterator to do this so that the task will run until there are no Access Profiles left.

Please let me know if this makes sense.

[harshamin9 (Harsh Amin)]

Hey @sahincelik
I would suggest use workflows with HTTP request to loop on GET call and DELETE call. But you need to ensure that the deletion errors are already handled before hand to cause no erroring in WF’s

[sahincelik]

Thanks both for suggestions. I found this tool to also delete roles and access profiles. Have you used it before?

IdentityNow Bulk Access Profile and Role Importer - Compass (sailpoint.com)

[neeraj99 (Neeraj Nautiyal)]

I have used this before, do you need any help on this??

[sahincelik]

Actually yes, I installed Ruby in my VM and ran the command below. It gives the following error message. Any idea how can I resolve this?

[neeraj99 (Neeraj Nautiyal)]

okay this generally arises due to SSL.
So try these 2.

1. If you are connected to VPN, disconnect from it and then try to execute again. Should work.
2. If you cannot disconnect from VPN then add this line in the ruby Code.
   http.verify_mode = OpenSSL::SSL::VERIFY_NONE
   add it just after this line: http.use_ssl = true
   basically wherever you find http.use_ssl = true after that add “http.verify_mode = OpenSSL::SSL::VERIFY_NONE” line.

EDIT: P.S there are many instances where you will find this particular line http.use_ssl = true so after every instance add this line http.verify_mode = OpenSSL::SSL::VERIFY_NONE
Should work after that.

[sahincelik]

Great help! Thanks