Machine Account / Identity Update in Sailpoint ISC

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi All,

We are testing the Machine Account Update API, and it is working as expected when updating fields such as Environment, SubType, and enabling/disabling accounts.

However, when we try to add a new entitlement to a machine account, the API returns a 400 Bad Request error. Interestingly, if we use the same request body with an existing entitlement already assigned to the account, the API returns a 200 Success response.

We have included a sample request body below for reference.

Has anyone encountered a similar issue, or is there any additional requirement for adding new entitlements through this API? As this is a newly introduced feature, any guidance or insights would be highly appreciated.

[
{
“op”: “add”,
“path”: “/connectorAttributes/roles”,
“value”: [
{
“id”: “557b7692b7b510101099e781de11a911”,
“type”: “ROLE”,
“name”: “action_category_creator”
}
]
}

refer update machine account API : update-machine-account-v-1 | SailPoint Developer Community

2

is the entitlement, which you are trying to add exist in isc for this source?? or can you share the body of 400??

3

yes, machine identities and machine accounts can be updated :

for machine Accounts:

  • navigate to Admin-> identity management-> Accounts → machine Accounts.
  • Select machine account and choose Update Account.
  • Owner, description, environment and other mapped attributes can be modified.

for machine Identities (Applications/ AI Agents):

  • navigate to Admin-> identity management-> identities-> machine identities.
  • open machine identity and select Update Identity.
  • Name, description and native identity details can be updated.
4

Topic is related to machine account API not from UI