Read User Groups from table USRGRP - SAP Direct

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi,

We are configuring SAP Direct system in our IIQ system. We are using the native connector to connect to SAP System.

We are able to retrieve accounts, roles and profiles objects. We have the requirement of retrieve User groups from USRGRP table. For this case we have noticed that native connector only can retrieve Roles and Profiles, but no User Groups.

Is there any way to retrieve User Groups from table USRGRP?

Thaks in advance

2

Finally I was able to read user groups from SAP system retrieving data from USGRP table.

For this case, I’ve noted that connector only retrieve roles and profiles from following objects:

Roles: AGR_FLAGS, AGR_PROF, AGR_TCODES, AGR_TEXTS
Profiles: USR11, UST10C

but I did not found any reference to retrieve data from USGRP table. So, for this case I have created a external task to retrieve data from this table, using a JCO connection.

  import sailpoint.object.ManagedAttribute;

  import com.sap.conn.jco.JCoDestination;
  import com.sap.conn.jco.JCoTable;
  import com.sap.conn.jco.JCoFunction;
  import com.sap.conn.jco.JCoParameterList;
  import com.sap.conn.jco.JCoDestinationManager;
  
  JCoDestination destination = JCoDestinationManager.getDestination(appName);
  JCoFunction function = destination.getRepository().getFunction("RFC_READ_TABLE");
  JCoTable inputTableParam = function.getTableParameterList().getTable("FIELDS");
  inputTableParam.appendRow();
  inputTableParam.setValue("FIELDNAME", "USERGROUP");
  JCoParameterList inputParamList = function.getImportParameterList();
  inputParamList.setValue("QUERY_TABLE", "USGRP");
  inputParamList.setValue("DELIMITER", ";");
  function.execute(destination);
  JCoTable table = function.getTableParameterList().getTable("DATA");

  List list = new ArrayList()
  if (!table.isEmpty()) {
	  table.firstRow();
	  do {
		  list.add(table.getString());
	  } while (table.nextRow());
  } 
  else {
	  log.trace("There is not userGroups in system " + appName);
  }

for (String item : list){
  ManagedAttribute ma = new ManagedAttribute();
  ma.setAttribute("User Group");
  ma.setValue(item); 
  ma.setRequestable(true);
  ma.setApplication(app);
  ma.setType("Entitlement");
  
  context.saveObject(ma);
  context.commitTransaction();
}