How to create the access profile with account attribute

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,

Have an account attribute Isadmin having values true or false.

  1. When Isadmin=true, the account should be granted the admin role

  2. When Isadmin=False, the account should be revoked the admin role.

Have API for the both the operations. Now i need to create an access profile which will be requested from Snow form.

How do i create the access profile with the account attribute in ISC.

2

create an identity attribute for is admin account attribute then you can create a workflow and attach that workflow to the access profile
for access profile you cant give criteria instead of it
create a role for that and give criteria

3

Can you please elaborate a little bit. Couldn’t get the complete picture here.

4

Hi @nandiniks1 Create an Entitlement Type on the Source of Attribute (isadmin) value. Create an Entitlement where isadmin=true and add it to the Access Profile of requestable type.

5

Hi Jeremy, this is the account attribute pulled straight from the get user API, I donot have any UUID for this attribute to define the entitlement type. Can please guide further.

6

HI @nandiniks1 Not sure what you mean by UUID. Mark the isadmin attribute as an Entitlement of String type (you can create an Entitlement type to keep it clear).

7

@nandiniks1 Nandini - Jeremy Place was on the right track with “mark isAdmin as an Entitlement type.” You was confused about (no UUID) is resolved by running the entitlement aggregation first ISC generates the entitlement records (with their own UUIDs) from your List Entitlements operation. You don’t supply the UUID; ISC creates it after aggregation.

Regards,

Kannan

8

@nandiniks1

On what basis the Isadmin will be true or false do you have any condition?

9

There is no Condition as such, if anyone requests the admin access on snow form, the isadmin attribute should be set to true value and vice versa when access revoked.