8.5
Hello all,
From Identity Warehouse => Applications Accounts tab, when we select multiple rows of accounts and click “Move Account”, it will prompt an error that “Only one account can be moved at a time”.
Would like to enquire if there is any ootb method to mass move multiple accounts from one identity to another?
Any help is appreciated!
Hello @shijingg
As you want to do mass move of sailpoint accounts you can consider writing custom rule with task which will queries link objects and then decide target identity and refreshes both old and new identities as given in sample below:-
import sailpoint.object.Link;
import sailpoint.object.Identity;
import sailpoint.object.QueryOptions;
import sailpoint.object.Filter;
// Fetch accounts to move (e.g. by application + nativeIdentity list)
QueryOptions qo = new QueryOptions();
qo.addFilter(Filter.eq(“application.name”, “Application Name”));
qo.addFilter(Filter.in(“nativeIdentity”, accountList));
List links = context.getObjects(Link.class, qo);
Identity targetIdentity = context.getObjectByName(Identity.class, “targetIdentityName”);
for (Link link : links) {
link.setIdentity(targetIdentity);
context.saveObject(link);
}
context.commitTransaction();
Let me know if it fix your error and you can mark this as solution.
Shi Jing Wong -
Sailpoint designed OOTB (Out of the Box) to move only one account at a time. The UI itself enforces this restriction, which is why you see the error, as per my understanding. write a custom rule.
I would do it with a script. Here’s an example of how to construct the ProvisioningPlan that will move the account from our open-source IIQCommon library.
you can change application correlation logic to move accounts if you can specify the unique logic to identity or accounts
There is no OOTb option available. Is it one time activity or a regular operational task?