Entitlement aggregation

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,
Entitlement aggregation is not happening in webservice source, not even scheduled aggregation. there are two entitlement types, for maully aggregation , the specific types are not displaying. and when starting all types, manual aggregation is failing to start. This is happening only for specific admin. what might be the issue.

2

Hi @kani1 ,

  1. Could you please share the error screenshot?
  2. To access source only source admin/ sub-admin are allowed to start the aggregation process.

Thanks,
Prashant

3

Hi @kani1 , you can also look User Level Matrix - SailPoint Identity Services

4

@kani1 Can you share the error that you are seeing?

Can you confirm that you have configured HTTP operation for all type of entitlement type? If not you will need to first configure and also make sure you select correct operation type in your entitlement aggregation operations.

for example you have two entitlement type role and group
then you will have two different operation type:

Operation type for group will be “Group Aggregation”
Operation type for role will be “Group Aggregation-roles”

5

Hi @kani1 Could you please check if all the entitlements from the entitlement types are being returned in Postman? Make sure you are using same apis what you are using in source config

6

Bh Error.PNG
Bh Error.PNG2574×1238 247 KB

7

Hi @kani1 ,

Thanks for sharing the screenshot.

As I see that provided screenshot has 500 error, which states the Internal server error. I would suggest you to please check if you are able to make an API request to retrive the entitlements?

Thanks

8

Hi @PrashantMishra
API working fine. i can retrieve that in postman.

9

@kani1 ,

Ok, could you please confirm whether you have only single type of entitlements configured ?
If so could you please check configured HTTP operation as per the postman.

At last but not least can you check the returned list of entitlements from postman whether does it contains the “+” sign or any emojis .

10

This issue got resolved after deleting the admin account and creating new one with Org_admin permission

11

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.