How to add Role Extended Attributes to the Role Hierarchy / Role Details modal in IdentityIQ 8.5?

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

[8.5]

Please share any images or screenshots, if relevant.

image
image909×399 19.3 KB

image
image1761×715 48.2 KB

[Please insert images here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

Hello,

I need to display a custom Role Extended Attribute inside the “Role Details” (Role Hierarchy) pop-up window. This modal appears globally across the platform, both when clicking on a role within the Access Catalog and when reviewing a role from an Identity profile.

Currently, the panel only shows the out-of-the-box fields: Name, Type, Owner, Description, and Elevated Access.

Upon inspecting the element in the browser, I noticed that this specific section is rendered using AngularJS (it contains classes like ng-binding and utilizes angular-ui-tree for the left panel). I also found that the HTML templates are bundled into SailPointBundle.js and roleReadOnlyView.js

My questions are:

  1. What is the supported, upgrade-safe method to inject or display Role Extended Attributes (like my attribute) into this specific AngularJS modal in IIQ 8.5?
  2. Is there a specific UIConfig setting, an ObjectConfig configuration, or a UI Customization Rule required to force the backend JSON to supply these extended attributes to the AngularJS component?

Any guidance, XML snippets, or best practices to achieve this without manually hacking the minified SailPointBundle.js or roleReadOnlyView.js file would be greatly appreciated.

Thanks in advance!

2

@CarlaFreire14 Plugins would be the safe option here without modifying any native xhtml/js file. It’ll inject a custom script which will add the new attribute that you want.

Here is the plugin document: Plugin Developer Guide | SailPoint Developer Community

3

Hello Carla. I would not modify SailPointBundle.js or roleReadOnlyView.js.

First, verify the attribute has a value on the Bundle. If it is Searchable, confirm it appears under Define → Roles → Role Viewer. IIQ 8.5 documents searchable Role Extended Attributes there, but not for this Access Catalog / Identity popup, so treat this only as an isolation test (Role Viewer).

Next, check the browser Network response when opening the popup. Your screenshot shows the detail rows are rendered from a fixed Ext.XTemplate.

  • If the custom attribute is already in the response, use a plugin snippet to render it.
  • If it is absent, expose it through a plugin REST resource and have the snippet retrieve it.

I could not find a documented UIConfig, ObjectConfig, or UI Customization Rule for adding arbitrary extended attributes to this modal. A plugin is the documented extension mechanism for this type of UI customization (Plugin Manifest). DOM-dependent snippet code may still need adjustment after an IIQ upgrade.