Pull identity's role membership via API

[jbrumley (Justin Brumley)]

Which IIQ version are you inquiring about? 8.2p3

Are there any available options to pull an identities role membership via API? In the documentation it looks like roles could be used in the attributes query, but I haven’t been able to get it to work. Can anyone help provide what the API call would look like if roles can be pulled for a specific identity?

[soswain_resmed (Soumyakanta Swain)]

Hi @jbrumley ,

I don’t think there are any direct APIs to get the role memberships.
You can use below options:

1. Role membership reports.
2. DB query by joining bundle and identity related tables.

Customization:

1. You can create your own API or rule.
2. Create a Rest endpoint for the same

Hope this helps.

Thanks
Sam

[bhanuprakashkuruva]

Hi Justin,

I think whatever you looking for it is having in APIs lists. Maybe you can check this. If this is not going to useful, then you have to develop your own REST API to achieve it.

https://community.sailpoint.com/t5/Technical-White-Papers/IdentityIQ-REST-API-Integration/ta-p/76814#toc-hId-557493126

[Arpitha1 (Arpitha Halaguru Kunne Gowda)]

Hi @jbrumley

The query parameter “attributes” is used to retrieve a list of attributes from the user profile through API response object. You can find more details in the get-users | SailPoint Developer Community

Now, regarding potential solutions:

1. One option is to define your own custom REST endpoint.
2. A simpler approach, in my opinion, would be to develop a custom workflow. This workflow would take the role name as an input variable, calculate its members, and return the result. You can invoke this workflow via the API using the launch-workflow | SailPoint Developer Community