# POST /api/v2/access-profiles **URL:** \ **Category:** Non-Public API Deprecations\ **Tags:** deprecated\ **Created:** [March 2, 2023, 3:39pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793 "2023-03-02T15:39:48Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\ **Post date:** [March 2, 2023, 3:39pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/1 "2023-03-02T15:39:48Z")
Replaced by > **[list-access-profiles | SailPoint Developer Community](https://developer.sailpoint.com/idn/api/v3/list-access-profiles)** > > List Access Profiles ---
**Author:** ![Ramiro](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@Ramiro](https://developer.sailpoint.com/discuss/u/Ramiro)\ **Post date:** [March 2, 2023, 10:12pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/2 "2023-03-02T22:12:32Z")
Hi Colin, The v2 endpoint allows for us to update the source on an access profile, whereas the v3 API explicitly does not allow this. This will break many of our workflows. Regards, Ramiro ---
**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\ **Post date:** [March 3, 2023, 8:50pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/3 "2023-03-03T20:50:42Z")
Hi Ramiro, Are you referring to the [v3 PATCH access profile endpoint](https://developer.sailpoint.com/idn/api/v3/patch-access-profile) not allowing the source to be updated? ---
**Author:** ![Ramiro](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@Ramiro](https://developer.sailpoint.com/discuss/u/Ramiro)\ **Post date:** [March 5, 2023, 10:13pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/4 "2023-03-05T22:13:37Z")
Hi Colin, That’s correct: The following fields are patchable: **name** , **description** , **enabled** , **owner** , **requestable** , **accessRequestConfig** , **revokeRequestConfig** , **segments** , **entitlements** , **provisioningCriteria** We haven’t moved from v2 to v3 API yet because some of our workflows rely on being able to update the source of an access profile. Regards, Ramiro ---
**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\ **Post date:** [March 6, 2023, 2:27pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/5 "2023-03-06T14:27:32Z")
I have opened this issue with the product team. To help keep track, I’ll drop the ticket number here: IDNLANAI-8369. ---
**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\ **Post date:** [March 6, 2023, 7:23pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/6 "2023-03-06T19:23:03Z")
@Ramiro can you please describe your use case for updating the source for access profiles, as opposed to creating a new profile with the new source? It is by design that the v3 access profiles don’t allow updating the source due to side effects like having entitlements from multiple sources. ---
**Author:** ![Ramiro](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@Ramiro](https://developer.sailpoint.com/discuss/u/Ramiro)\ **Post date:** [March 6, 2023, 10:51pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/7 "2023-03-06T22:51:18Z")
Hi Colin, Two main use cases: 1. Reworking access which is allocated to user’s everyday accounts to instead use privileged accounts - in our environment they are managed as different sources on the same identity. 2. Implementation of temporary privilege escalation (TPE) process and replacing “standing permissions” with “requester groups” on our TPE source which allow for access to be escalated. The reason creating a new access profile doesn’t work in this instance is because there are many things referencing the old access profile - roles, apps, or downstream systems (e.g., our ServiceNow request forms). Anything which references those existing access profiles needs to be updated across a number of different systems to ensure we don’t end up with orphan objects all over the place and access profiles disappearing from roles (or worse, roles keeping the access which is only ever supposed to be temporarily assigned). This turns a 2 minute automated job into a multi-hour manual slog. ---
**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\ **Post date:** [July 25, 2023, 2:17pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/8 "2023-07-25T14:17:39Z")
@Ramiro , You can now update the entitlements of an access profile **ONLY IF** you update both the source and the entitlements in the same PATCH API call. If you attempt to update the source or the entitlements in separate PATCH calls, it will fail. PATCH /v3/access-profiles/:id ```json [ { "op": "replace", "path": "/source", "value": { "id": "2c9180887671ff8c01767b4671fb7d5e", "type": "SOURCE", "name": "Employees" } }, { "op": "replace", "path": "/entitlements", "value": [ { "id": "2c9180877677453d01767b4b08f63386", "type": "ENTITLEMENT", "name": "DevRel" } ] } ] ``` ---
**Author:** ![Ramiro](https://avatars.discourse-cdn.com/v4/letter/r/258eb7/32.png) [@Ramiro](https://developer.sailpoint.com/discuss/u/Ramiro)\ **Post date:** [August 10, 2023, 12:16am UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/9 "2023-08-10T00:16:42Z")
Awesome Colin! We’ll give this a try ASAP and let you know if we have any issues. ---
**Author:** ![ccarlton](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@ccarlton](https://developer.sailpoint.com/discuss/u/ccarlton)\ **Post date:** [October 13, 2023, 9:27pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/10 "2023-10-13T21:27:26Z")
We sometimes have to create 100’s of accessprofiles, and so we use the Sailpoint bulk role importer ( [IdentityNow Bulk AccessProfile and Role Importer - Compass (sailpoint.com)](https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-AccessProfile-and-Role-Importer/ta-p/77382)). Another usecase, Sometimes we might have fewer access profiles, but the accessprofiles have many entitlements (with some amount of overlap). **Long story short, that tool is very useful, and uses /v2/ apis including /v2/access-profiles.** please advise. ---
**Author:** ![ccarlton](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@ccarlton](https://developer.sailpoint.com/discuss/u/ccarlton)\ **Post date:** [March 7, 2024, 8:51pm UTC](https://developer.sailpoint.com/discuss/t/post-api-v2-access-profiles/8793/12 "2024-03-07T20:51:27Z")
This is an old thread. The Bulk tool was recently **Significantly** updated (late Feb 2024) it no longer uses v2 apis, and now does more than it did before!!