IIQ Business Role Report


:spiral_notepad: Description IdentityIQ - Business Role Report that displays the required roles, permitted roles, and assignment rules for each business role.
:balance_scale: Legal Agreement By using this CoLab item, you are agreeing to SailPoint’s Terms of Service for our developer community and open-source CoLab.
:hammer_and_wrench: Repository Link https://github.com/sailpoint-oss/colab-reports/tree/main/identity-iq/BusinessRoleReqPermReport
:hospital: Supported by Community Developed

Overview

Business Role Report that displays the required roles, permitted roles, and assignment rules for each business role. The report is created in Java and needs to be compiled or imported into the Services Standard Build (SSB)

Example report output:

Requirements

  • JDK8 or above
  • IdentityIQ 7.0 or above
  • (Services Standard Build)

Guide

  • Compile the file BusinessRoleReqPermReport.java using:

    javac -cp "<SailPoint-Root-Folder>/WEB-INF/lib/identityiq.jar" BusinessRoleReqPermReport.java
    
  • Copy the compiled BusinessRoleReqPermReport.class file to correct classes folder

    cp BusinessRoleReqPermReport.class <SailPoint-Root-Folder>/WEB-INF/classes/sailpoint/reporting/datasource
    
  • Restart the IdentityIQ application server (i.e. restart Tomcat)

  • Import the file TaskDefinition-BusinessRoleReqPermReport.xml into IdentityIQ

    • Gear->Global Settings->Import from File
  • Find the report Business Role Required and Permitted Report in Intelligence->Reports category Role Management Reports

Or

  • Copy the config and src folders into an existing Services Standard Build (SSB)
5 Likes

Hi @Remold,

This is great, is there any similar option to include entitlements and application columns in the same report? like to fetch all entitlements under each IT role which is tagged under business role.

Did you try to include entitlements and application column in the same report and did you face any challenges by any chance? Any thoughts?

Thanks,
Vijay

Hi @VijayMaripi,

This is possible using the same technic.

By adding an additional Iterator within the requiredIterator and permittedIterator should do the trick. Also add the columns and update the getFieldValue-function for the same.

– Remold