IIQ Custom Report

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

[8.4]

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

[I have a requirement to write a custom report that should have username, user’s assigned roles, It roles that are assigned to user,IT Business Mapping(if user has only Business Role return 0 if user has both business role and IT roles corresponding to business role return 1, If business role have multiple IT role assigned to user should also return 1)

2

report.xml (4.5 KB)

3

Issues 1. For the Business Role column, I’m currently retrieving values from Bundle.displayName, but this includes all roles, including IT roles. I only need Business Roles. I tried writing a script to fetch Business Roles using identity.getAssignedRoles(), but it throws an exception saying that the getAssignedRoles() method is not available in the Identity class.

Issue 2. I can’t find all assigned IT roles to user’s profile.

issue 3. Assignment is not working properly

4

hi @poison001

You’r current code will return 1 as soon as it finds any IT Role, but it doesn’t check if the user actually has that IT Role assigned.

If you need to:

  • Get the user’s assigned bundles.
  • Check if any of the IT Roles from requirements are among the user’s assigned bundles.

Can you try with this RenderScript

import sailpoint.object.*;
import java.util.*;

Bundle businessRole = context.getObjectById(Bundle.class, value);
Identity identity = context.getObjectById(Identity.class, args.get("i.id"));

if (businessRole == null || identity == null) {
  return 0;
}

Collection<Bundle> userBundles = identity.getBundles();
Collection<Bundle> requiredITRoles = businessRole.getFlattenedRequirements();

for (Bundle itRole : requiredITRoles) {
  if (userBundles.contains(itRole)) {
    return 1;
  }
}
return 0;