Renaming IT, Business, and Birthright Role

Hello All,

Could you please confirm whether IT Roles, Business Roles, and Birthright Roles can be renamed?
Specifically, can both the name and displayName attributes be updated?
Requirement:
As part of our RBAC model, roles must align with organizational master data from HR, which can change over time. Therefore, the ability to rename roles is necessary to maintain proper governance.
Could you please confirm if renaming roles is supported and, if so, the recommended approach?

Regards,
Divya P

Yes you can rename it

Yes, these roles can be renamed and you can change the display name whenever needed. Just to ensure it updated for all the identities run the Propagate Roles Changes
task.

Regards
Ankush

Hi @Xdipa2407 ,

Yes you can modify the names of the roles.

Enable the ‘Allow propagation of role changes’ in Global Settings → IdentityIQ Configuration → Roles → Allow propagation of role changes and then create and run the Propogate Role Changes Task.

Hello, In propagation task what option you have enabled?
Regards,
Divya P

I am asking for “name” attribute

can you please share the screen shot?

You can just create a task of type ‘Propagate Role Changes’ and execute it , it is not mandatory to select any options in the task for propagating role changes.

yes you can change name of IT, BR, Business roles.
After that run Refresh Identity and keep below options checked:

Refresh Identity Entitlements for all links
Refresh assigned, detected roles and promote additional entitlements
Provision assignments
Process events

Try this in lower environment first

1 Like

Hi @Xdipa2407

If it is only the name change(name, display name), you do not need to execute Propogate Role Changes task. Propogate Role changes task is intended to de-provision entitlement in case of any modifications to the role - Entitlement relation.

You only would need to run Refresh Identity Cube task for all the users with Birthright, Business and IT with the below options and that should update the new names in role associations with identity:

Refresh assigned, detected roles and promote additional entitlements
Refresh Identity Entitlements for all links
Refresh role metadata for each identity

1 Like

@Xdipa2407 When you change the name, I would suggest doing it through UI. and not attempt to do it through Debug pages. and then Refresh task with the option suggested by @uday_kilambi