Hello SailPoint, Is that possible in the role define assignment criteria to put a json query to get specific list of identities to assign the role. [image]

Hi @rajrout2024 , As per SailPoint document it does not allow any json query assign role specific set of users Automating Role Assignment - SailPoint Identity Services SailPoint Identity Services Documentation You should use either stand criteria or identi…

Hello, not possible. You could fetch identities via API using script, and then create a role via API as well, using create-role | SailPoint Developer Community , and add identities in the body, but that creates unnecessary complexity. @amulpuru is correct, you should use identity list via UI there.

How many identities are you trying to add?

Here you can define standard set of criteria from the role page. Please refer documentation for more info. Criteria can be added directly in role json object but not query.

Hello @vkashat , It not really upon number of identities. Every department has their own specific role and a base role I want if anyone requested/get any specific role from that department the base role should automatically provision to that user.

@msingh900 , But how to add a role Json to another role define assignment criteria Json body?

You should be able to accomplish this without using the role JSON, you can use standard criteria or dynamic roles, especially if you’re assigning it based on department. You can have an additional criterion to check for a certain entitlement granted by the other role.

You can use python or rub script to automatically create roles in bulk. PLease check create role api documentation. You need to pass the json body on correct format and it will create roles for your organization.

Hi @rajrout2024 , To achieve your use case: granting role X (base role) if an identity is assigned role A or B or C so on (roles based on department); you could potentially use the entitlement(s) granted by the roles in standard criteria of role X. However, you are better of granting the entitlemen…

Role Assignment Criteria

Identity Security Cloud (ISC) ISC Discussion and Questions

kompala (Vidya Sagar Kompala) January 19, 2026, 1:18pm 6

@rajrout2024 Check the new capability : Dynamic Access roles and dimensions helps you achieve what you are trying to implement. - New Capability: Dynamic Access Roles! - #10 by PGookin

Topic		Replies	Views
Using /v3/roles endpoint to query criteria covered identity assignments ISC Discussion and Questions apis , identity-security-cloud	4	100	December 28, 2025
IdentityNow role - Moving from IdentitiyList to Criteria based ISC Discussion and Questions	5	590	October 22, 2023
Assigning roles based on a complex query ISC Discussion and Questions identity-security-cloud , roles	8	135	March 8, 2026
Role eligibility check based on script inside the role IIQ Discussion and Questions workflows , rules , identityiq	11	91	April 4, 2026
To get list of Identities ISC Discussion and Questions identity-security-cloud	4	533	July 19, 2023

Role Assignment Criteria

Related topics