# How to add an attribute from an account to the provisioningPlan

**URL:** <https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617>\
**Category:** SHF Discussion and Questions\
**Tags:** webservice-connector, rules, entitlements, sailpoint-identity-security, provisioning\
**Created:** [April 11, 2024, 4:34pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617 "2024-04-11T16:34:40Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![reinajss](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/reinajss/32/12652_2.png) [@reinajss](https://developer.sailpoint.com/discuss/u/reinajss)\
**Post date:** [April 11, 2024, 4:34pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/1 "2024-04-11T16:34:41Z")

</div>

Hi guys,

We are trying to add an attribute that is in the account schema to add an access profile, however this attribute is not shown in the plan, is it possible to add an account attribute that comes in the aggregation of this source in the plan to add a new access?

For example, attributeA and attributeB both come in the aggregation of the account we are talking about, but only attributeA appears in the plan for adding a profile, attributeB does not appear.

My question is how can I add this attribute to the plan?

This is the body we are sending when adding accesses:  
{  
“login”:“$plan.nativeIdentity$#fonte”,  
“permissoes”:[  
{  
“codigo”:“$plan.menu\_permissoes$”,  
“funcionalidades”:[  
{  
“acao”:[  
“incluir”,  
“alterar”,  
“pesquisar”,  
“excluir”,  
“bloquear”,  
“aprovar”  
],  
“codigo”:“$plan.menu\_funcionalidades$”  
}  
]  
}  
]  
}  
This variable “$plan.menu\_functionalidades$” brings the value, however this variable “$plan.menu\_permissoes$” is removed because it is empty, but we have both attributes in the account, and we only get one value, but to add the profile it is essential May we have both.

Can anyone help me how to build a rule to get this value?

Thank you very much in advance for your help.

---

<div class="post-metadata">

**Author:** ![kjakubiak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kjakubiak/32/7052_2.png) [@kjakubiak](https://developer.sailpoint.com/discuss/u/kjakubiak)\
**Post date:** [April 11, 2024, 4:36pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/2 "2024-04-11T16:36:56Z")

</div>

I believe the easiest way would be to build before provisioning rule and add this attribute into the provisioning plan from that place.

---

<div class="post-metadata">

**Author:** ![reinajss](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/reinajss/32/12652_2.png) [@reinajss](https://developer.sailpoint.com/discuss/u/reinajss)\
**Post date:** [April 11, 2024, 4:50pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/3 "2024-04-11T16:50:48Z")

</div>

Kamil, thanks for this,

Could you send me a example, how can I do this, in the source of the accounts? Because I did this using attributes of the Identity, but using accounts attibutes I didnt.

Thanks for your help.

---

<div class="post-metadata">

**Author:** ![jrossicare](https://avatars.discourse-cdn.com/v4/letter/j/a698b9/32.png) [@jrossicare](https://developer.sailpoint.com/discuss/u/jrossicare)\
**Post date:** [April 12, 2024, 3:24am UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/4 "2024-04-12T03:24:23Z")

</div>

Hi,

You have 3 options, as far as I know.

1. Create a Before Provisioning Cloud rule to include it there
2. Create a Before Operation Connector rule, and make an API call to get the account from ISC - search this forum for “X-IDNUrl” and you will find some code for it.
3. In the provisioning plan, you can create an attribute called “attributeB2” and set the value to be attributeB, this way you will have it.

`POST {{api_url}}/beta/sources/<source>/provisioning-policies`

```auto
    {
        "name": "MY_WS_UPDATE_PP",
        "description": null,
        "usageType": "UPDATE",
        "fields": [
            {
                "name": "attributeB2",
                "transform": {
                    "type": "accountAttribute",
                    "attributes": {
                        "attributeName": "attributeB",
                        "sourceName": "My Web Service"
                    }
                },
                "attributes": {},
                "isRequired": true,
                "type": "string",
                "isMultiValued": false
            }

```

---

<div class="post-metadata">

**Author:** ![ipobeidi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ipobeidi/32/16000_2.png) [@ipobeidi](https://developer.sailpoint.com/discuss/u/ipobeidi)\
**Post date:** [April 12, 2024, 4:31pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/5 "2024-04-12T16:31:41Z")

</div>

Reinaldo , tudo bem ?  
você pode usar a Before provisioning da propria Sailpoint pra isso

Abaixo segue a documentação dela :  
[Services Standard BeforeProvisioning.pdf](https://developer.sailpoint.com/discuss/uploads/short-url/xYffSI2jkdPwr88t617HYXvgS8M.pdf) (68,4,KB)

Não precisa criar uma regra so pra isso, se quiser me chamar no chat eu consigo te auxiliar tbm.

best

---

<div class="post-metadata">

**Author:** ![reinajss](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/reinajss/32/12652_2.png) [@reinajss](https://developer.sailpoint.com/discuss/u/reinajss)\
**Post date:** [April 23, 2024, 1:36pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/6 "2024-04-23T13:36:30Z")

</div>

Hi Jason,

Thanks a lot for your help, gave me a different vision about webservice integrations. Now we can see the value of the attibute, therefore we can not to take this value, we have used “$plan.attributeB2$”, but this value is empaty. We have a different for to get this value?

thanks

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 22, 2024, 1:37pm UTC](https://developer.sailpoint.com/discuss/t/how-to-add-an-attribute-from-an-account-to-the-provisioningplan/44617/7 "2024-06-22T13:37:17Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.