Need to stop aggregating "Peoplesoft administrator" entitlement/role

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Share all details about your problem, including any error messages you may have received.

*Hi,

We have PeopleSoft direct connector where we are promoting an rolenames as entitlement and “PeopleSoft administrator” role exists on some of the users and it’s promoting as entitlement while running the account aggregation.
and when we run the group aggregation it’s deleting the entitlement as it’s not exist in the rolenames.

but as per the* Using the PeopleSoft Administrator Role

”The PeopleSoft Administrator role cannot be viewed, edited, modified, or cloned because it is not defined as other roles are defined. The PeopleSoft Administrator role is hard-coded into every application. You will not find this role if you search for it in the roles component.”

this is a true statement.

Please suggest fixing this issue.

2

You could do a customization rule on the group in the application. Something like this, although I’m sure the attribute name is something other than roleName.

I’m also not positive on this, but something like this is how we excluded a specific user from being aggregated with accounts.

import sailpoint.api.SailPointContext;
import sailpoint.connector.AbstractConnector;
import sailpoint.connector.Connector;
import sailpoint.object.Application;
import sailpoint.object.ResourceObject;
import java.util.*;
if (null != object && null != object.getObjectType() && object.getObjectType().compareTo(Connector.TYPE_GROUP) == 0)
{
    String roleName = object.getAttribute("roleName");
    if (roleName.contains("PeoleSoft administrator"))
    {
        return null;
    }   return object;
}
/**
* Everything else should be returned as is...
*/
return object;
3

Hi @LarryG ..Thanks for a suggestion.will test this out