Generate Report and send to a group of people/goverance group

[CeeJ1 (Christine Joy Valdez)]

Hi everyone!

We have this requirement wherein we needed to send the generated report to a group of users. Is there anyway we could use a governance group under the “other subspriction”? Asking this because there are many users that might need to see the generated report.

Thank you!

[Santhakumar (Shantha Kumar)]

@CeeJ1 I think you can’t use the governance grp in search query subscription. You can only select the list of users from dropdown.

Thanks.

[jesvin90 (Jesvin Joseph)]

Hi @CeeJ1,

You cannot add governance groups to the subscribers list. If you need the email to be send out to multiple users, you may need to create an email distribution list, associate it with a dummy Identity in ISC and then add this identity to the subscriber list.

Keep in mind that the users will need elevated privileges to view the full report as the subscription email will have restricted info.

Take a look at the user level matrix for further info.

User Level Matrix - SailPoint Identity Services

[VijayMaripi]

Hi @CeeJ1 ,

Just a thought, to achieve this may be we can follow the below approach:

• Create a governance group with list of members
• Save your search query and to get the saved search query id, click on edit option for saved search and then you will have the id in the url
• Create a workflow with following steps:
  • Use scheduled trigger
  • Use one HTTP action - to get all the governance group members list using this api: https://sailpoint.api.identitynow.com/beta/workgroups/:governancegroupid/members
  • Now take another (second)HTTP action to execute saved search query using the saved search query id, and the api: “https://sailpoint.api.identitynow.com/v3/saved-searches/:SavedSearchQueryID/execute” , following is the example json body you can use

{
  "owner": {
    "type": "IDENTITY",
    "id": "owner id"
  },
  "recipients": [
    {
      "type": "IDENTITY",
      "id": "<identityId>"
    },
 {
      "type": "IDENTITY",
      "id": "<identityId2>"
    }
  ]
}

• For 2nd http action try to parse the above http action 1 response and pass it to http action 2 body either directly or using a loop

This should trigger the emails for all the members with the reports.

I have tried above apis in postman, and i was able to trigger the emails even if i pass entire response from first api to second api call as recipients list value in the json body . Feel free to achieve this in workflow

I hope this route helps,

Thanks,
Vijay Maripi

[CeeJ1 (Christine Joy Valdez)]

Hi everyone,

Thank you for your suggestions. I’ll try your suggestions and let you know what works for us. Thank you.