Role Bundle Update Deployment using SSB and Issues

Which IIQ version are you inquiring about?

8.3 P3

We have on-boarded a new application and retired the old application (enabled maintenance mode). With this change, we also updated the role bundles (profile) to refer to the entitlements of the new application. These changes to role bundles were deployed using SSB build. Our observation is that:

  1. OOTB Role Search wizard: It shows the role searchable using OLD application (retired) name but not with the new application name.
  2. We confirmed using debug page that role definition contains the changes done for new application ONLY there are profile definitions associated with the OLD application.

What could be the issue that even though role definition is updated then still role search UI is able to search the role using application filter = OLD app name and not searchable using application filter = NEW app name?

Thanks,
Pallavi

@pallavi

When you mean done via SSB, do you mean you directly changed the xmls?

Did you check if the relationship is updated in BunldeProfileRelation, BunldeProfileRelationObject, BunldeProfileRelationStep Objects , if not please run the below task to make sure entire role to profile relationship is updated in all table references

Refresh Role-Entitlement Associations

Please try this and let me know if still an issue

1 Like

Hi @iamksatish Thank you for the response. Yes, we have updated the role bundle XML to point to the new application and then deployed using SSB process.

Do you think that importing the XML using ‘file based import wizard’ will make a difference. As mentioned in below post.

We validated BunldeProfileRelation object, using debug page when we check the details of this XML then there is no reference of OLD app however OLD app name is shown in the table grid 1st page when we list all the BunldeProfileRelation objects.

Thanks,
Pallavi

@pallavi
Please run Refresh Role-Entitlement Associations and check if this resolved your issue, mostly it should resolve your issue

1 Like

Yes, we will try this out. I hope it will not trigger the bulk provisioning transactions (as per definition it will correct/update the role to access association).

Hi @iamksatish We have not yet executed the role entitlement association task but would like to share another interesting observation:

OOTB - Role Search wizard or the catalog - Role Source Application option does not list the role when searched using the NEW application name present in role. However, if we execute ‘Get All Roles By Application Report’ then it does show the role in the result list for the NEW application.

Same Role based access provisioning also works as expected for the newly added access profile/application in the role bundle.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.