# Issue with Bulk Access Profiles and Roles - Identities not added to Role

**URL:** <https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, roles\
**Created:** [August 19, 2024, 1:09pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159 "2024-08-19T13:09:20Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 19, 2024, 1:09pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/1 "2024-08-19T13:09:20Z")

</div>

I am trying the latest:

# Bulk Access Profiles and Roles Importer

Date: 2021-03-08

Author : Rakesh Kapoor  
Heavily Modified by Christophe Chazeau in June 2023

CSV file I am trying to use: NOTE - the user is not getting the Role as verified via the UI. Any in pointing me into the right direction for troubleshooting would help.

assignUsersToRole, Test AD TH Birthright Role - Account Creation - UAT Testing Requestable, IDENTITY\_LIST,rpgz7430

Result Screen (note: I change the URL value here so it is not the real one)  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : IdentityNow Bulk Role/Access Profile Importer  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : Version : 9.2.0  
INFO : Role Importer Tool : Date : 2023-08  
INFO : Role Importer Tool : Author : Rakesh Kapoor ([rakesh.kapoor@sailpoint.com](mailto:rakesh.kapoor@sailpoint.com))  
INFO : Role Importer Tool : Modified : Christophe Chazeau ([christophe.chazeau@sailpoint.com](mailto:christophe.chazeau@sailpoint.com))  
INFO : Role Importer Tool : Handling command line values (will override config file)  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : Reading configuration… ./config.json  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : Config Recap :  
INFO : Role Importer Tool : URL : [https://something.api.identitynow.com](https://something.api.identitynow.com)  
INFO : Role Importer Tool : File : TestRoleAssign-B.txt  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : Success : Retrieved Access Token  
INFO : Role Importer Tool : Authenticating to IdentityNow…  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : Authentication successful.  
INFO : Role Importer Tool : Getting List of Sources, every ‘#’ is 250 sources :  
INFO : Role Importer tool : Sources : found 54 sources  
INFO : Role Importer Tool : Getting List of Existing Access Profiles, every ‘#’ is 250 Access Profiles :  
INFO : Role Importer tool : Access profiles : found 73 Access profiles  
INFO : Role Importer Tool : Getting List of Existing Roles , every ‘#’ is 250 roles : ##########  
INFO : Role Importer Tool : Found 2514 roles  
INFO : Role Importer Tool : Getting List of Existing Applications  
INFO : Role Importer Tool : Application Hash Map Creation Success!  
INFO : Role Importer Tool : Getting List of Governance Groups, every ‘#’ is 50 groups :  
INFO : Role Importer tool : Governance Groups : found 4 groups  
INFO : Role Importer Tool : Getting List of Segments, every ‘#’ is 50 segments :  
INFO : Role Importer tool : Segments : found 1 segments  
INFO : Role Importer Tool : Reading CSV file TestRoleAssign-B.txt…  
INFO : Role Importer Tool : --------------------------------------------------------------  
INFO : Role Importer Tool : \>\>\> Processing line #1 : task assignUsersToRole \<\<\<  
INFO : Assign Users To Roles : Assigning Role ‘Test AD TH Birthright Role - Account Creation - UAT Testing Requestable’ to users by updating it  
INFO : ‘122e03c340d64f2abc556adb39e65417’  
INFO : rpgz7430  
INFO : Assign Users To Roles : Role assignment for role Test AD TH Birthright Role - Account Creation - UAT Testing Requestable updated

---

<div class="post-metadata">

**Author:** ![agutschow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/agutschow/32/8543_2.png) [@agutschow](https://developer.sailpoint.com/discuss/u/agutschow)\
**Post date:** [August 19, 2024, 2:06pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/2 "2024-08-19T14:06:38Z")

</div>

Does the user not have the role or doesn’t get the access associated with the role?

Alicia

---

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 19, 2024, 2:34pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/3 "2024-08-19T14:34:26Z")

</div>

Alicia,

If I run {{baseUrl}}/roles/:id/assigned-identities via Postman, it does not show the user in question in the result. Also when I look at the Role via the UI, the user is also not listed.

---

<div class="post-metadata">

**Author:** ![PrashantMishra](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/prashantmishra/32/15463_2.png) [@PrashantMishra](https://developer.sailpoint.com/discuss/u/PrashantMishra)\
**Post date:** [August 19, 2024, 3:02pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/5 "2024-08-19T15:02:54Z")

</div>

Hi @ScottTanselle ,

As I could see the provided way

> assignUsersToRole, Test AD TH Birthright Role - Account Creation - UAT Testing Requestable, IDENTITY\_LIST,rpgz7430

to assign roles I think you need to give “;”. In case if it doesn’t work out try declaring one more identity as per the below provided syntax.

Kindly find the below provided syntax to assign the roles to users

> assignUsersToRole, Role Name,assignedType,assignedValue

assignedValue can take the three values as `VALUE_MAP` or `IDENTITY_LIST` or `COMPLEX\_CRITERIA’.

Example :

> assignUsersToRole, Example Role, IDENTITY\_LIST,iden1;iden2;iden3

For more details please find the provided link for your reference : [https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-Access-Profile-and-Role-Importer/ta-p/77382](https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-Access-Profile-and-Role-Importer/ta-p/77382)

I hope this will help.

Thanks,  
Prashant

---

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 19, 2024, 3:13pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/6 "2024-08-19T15:13:16Z")

</div>

Prashant,

We did try before using 3 identities and it had the same result.

I also tried in Postman, with a body of, which it gives a 200 OK, but still don’t see the user being added to the Role

[  
{  
“op”: “replace”,  
“path”: “/membership”,  
“value”: {  
“type”: “IDENTITY\_LIST”,  
“identities”: [  
{  
“id”: “7bfbb88d878a4b2aa3dd8ace86d52832”  
}  
]  
}  
}  
]

---

<div class="post-metadata">

**Author:** ![PrashantMishra](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/prashantmishra/32/15463_2.png) [@PrashantMishra](https://developer.sailpoint.com/discuss/u/PrashantMishra)\
**Post date:** [August 19, 2024, 4:48pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/7 "2024-08-19T16:48:14Z")

</div>

Hi @ScottTanselle ,  
I would like to know whether in your tenant refresh task is run successfully for the user?

Role assignment evaluate as per the configured identity Refresh task that runs every day at 8:00 AM and 8:00 PM in the tenant’s timezone to keep your identities synchronized.

Try to run the below provided API to process the identity :- [start-identity-processing | SailPoint Developer Community](https://developer.sailpoint.com/docs/api/beta/start-identity-processing/).

Give it a try and hopefully it will work.

Thanks,  
Prashant

---

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 19, 2024, 5:23pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/8 "2024-08-19T17:23:38Z")

</div>

It stated that it ‘passed’ for this particular user, though still that Role has not been assigned to the user

---

<div class="post-metadata">

**Author:** ![PrashantMishra](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/prashantmishra/32/15463_2.png) [@PrashantMishra](https://developer.sailpoint.com/discuss/u/PrashantMishra)\
**Post date:** [August 20, 2024, 6:17am UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/9 "2024-08-20T06:17:28Z")

</div>

Hi @ScottTanselle ,  
Post identity refresh task are you still experiencing issue with provisioning the assigned roles to user?

---

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 20, 2024, 10:54am UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/10 "2024-08-20T10:54:22Z")

</div>

Yes, I am still having the same issue where the user does not get the role.

I am going to try with a different set of users and see what happens

---

<div class="post-metadata">

**Author:** ![ScottTanselle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/scotttanselle/32/10152_2.png) [@ScottTanselle](https://developer.sailpoint.com/discuss/u/ScottTanselle)\
**Post date:** [August 21, 2024, 7:42pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/11 "2024-08-21T19:42:43Z")

</div>

Finally able to get the Bulk Importer to work.

Had to completely go through the Ruby script, display some of the values to the console to determine what was really needed in the input file for the userID.

For us, the script was looking for idAlias and it was determined that we need to use ‘Alias’ attr value on the SP Identity in the input file, which for use equates to employeeNumber.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [October 20, 2024, 7:43pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-bulk-access-profiles-and-roles-identities-not-added-to-role/77159/12 "2024-10-20T19:43:29Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
