We have list 0f 100 identities, we need to add identities to xyz ENT. How can we achieve this?
submitting that many is not good right who get access no idea
Hi @shaffusailpoint ,
You have list of 100 Ids and entitlements right, if you use this API, only those will get the access.
Can you please elaborate the issue a bit more which this API is causing?
Kind regards,
Aayush
You can achieve it with a workflow. Use get accounts action, use loop operator to iterate each account and use manage accounts to raise the request for entitlements
Simplest solution is go with role bases approach where u can select the identities which you want to assign to those entitlement. And whenever u want to remove u can remove from assignment inside role.(this approach may be very as per your need)
second approach i will go with application team and add from there one time.
Another approach is u can use bulk approach, sailpoint already having one code that is in python to upload role and update it in bulk, extend the same and write ur logic
You can use API to achieve this usecase, instead of manually going to UI and raising a request. Otherwise, if you could create a Java client that will call the API in loop for you for all the identities.
May be it’s on the requirement it depends on,
If it’s a one time requirement which I assume, API is the best and quick thing to go to.
Submitting the access request is the only way to add an identity to the entitlement on ad-hoc basis You can submit all in one access request also.
The provided identity id’s will get the entitlement id that is passed in the API request. They will not get anything else.
If you can’t or don’t want to submit an access request, request the application team to provision it directly in the application and you can update in SailPoint as part of aggregation.
Hello,
You can create a birthright role, assign the respective xyz ENT to be assigned to the user, provide assignment criteria which will assign this role to only those 100 users, save the changes and enable the role.
Regards,
Rohit Wekhande.
Hi @shaffusailpoint ,
You can create a role, and add then select this entitlement, then in the criteria, give condition to match only those 100 users and then do apply.