# Role Bundle Update Deployment using SSB and Issues

**URL:** <https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717>\
**Category:** IIQ Discussion and Questions\
**Tags:** roles, identityiq\
**Created:** [December 4, 2024, 3:05am UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717 "2024-12-04T03:05:41Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![pallavi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pallavi/32/17939_2.png) [@pallavi](https://developer.sailpoint.com/discuss/u/pallavi)\
**Post date:** [December 4, 2024, 3:05am UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/1 "2024-12-04T03:05:42Z")

</div>

## Which IIQ version are you inquiring about?

8.3 P3

We have on-boarded a new application and retired the old application (enabled maintenance mode). With this change, we also updated the role bundles (profile) to refer to the entitlements of the new application. These changes to role bundles were deployed using SSB build. Our observation is that:

1. OOTB Role Search wizard: It shows the role searchable using OLD application (retired) name but not with the new application name.
2. We confirmed using debug page that role definition contains the changes done for new application ONLY there are profile definitions associated with the OLD application.

What could be the issue that even though role definition is updated then still role search UI is able to search the role using application filter = OLD app name and not searchable using application filter = NEW app name?

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/2/0/20068fc554b8bc56a03084efa1a31cbc648d6dad.png)

Thanks,  
Pallavi

---

<div class="post-metadata">

**Author:** ![iamksatish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamksatish/32/26217_2.png) [@iamksatish](https://developer.sailpoint.com/discuss/u/iamksatish)\
**Post date:** [December 4, 2024, 6:49am UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/2 "2024-12-04T06:49:49Z")

</div>

@pallavi

When you mean done via SSB, do you mean you directly changed the xmls?

Did you check if the relationship is updated in BunldeProfileRelation, BunldeProfileRelationObject, BunldeProfileRelationStep Objects , if not please run the below task to make sure entire role to profile relationship is updated in all table references

Refresh Role-Entitlement Associations

Please try this and let me know if still an issue

---

<div class="post-metadata">

**Author:** ![pallavi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pallavi/32/17939_2.png) [@pallavi](https://developer.sailpoint.com/discuss/u/pallavi)\
**Post date:** [December 4, 2024, 10:39am UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/3 "2024-12-04T10:39:22Z")

</div>

Hi @iamksatish Thank you for the response. Yes, we have updated the role bundle XML to point to the new application and then deployed using SSB process.

Do you think that importing the XML using ‘file based import wizard’ will make a difference. As mentioned in below post.

> [@Previous Role Description appears in newly created work items and requests](https://developer.sailpoint.com/discuss/t/previous-role-description-appears-in-newly-created-work-items-and-requests/3459/11):
>
> Out of curiousity, if you are in a non-production environment can you try deleting the WEB-INF/BundleManagedAttributeIndex folder and then re-run the ‘full text index refresh’ task again?

We validated BunldeProfileRelation object, using debug page when we check the details of this XML then there is no reference of OLD app however OLD app name is shown in the table grid 1st page when we list all the BunldeProfileRelation objects.

Thanks,  
Pallavi

---

<div class="post-metadata">

**Author:** ![iamksatish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamksatish/32/26217_2.png) [@iamksatish](https://developer.sailpoint.com/discuss/u/iamksatish)\
**Post date:** [December 4, 2024, 11:56am UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/4 "2024-12-04T11:56:45Z")

</div>

@pallavi  
Please run Refresh Role-Entitlement Associations and check if this resolved your issue, mostly it should resolve your issue

---

<div class="post-metadata">

**Author:** ![pallavi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pallavi/32/17939_2.png) [@pallavi](https://developer.sailpoint.com/discuss/u/pallavi)\
**Post date:** [December 4, 2024, 1:59pm UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/5 "2024-12-04T13:59:12Z")

</div>

Yes, we will try this out. I hope it will not trigger the bulk provisioning transactions (as per definition it will correct/update the role to access association).

---

<div class="post-metadata">

**Author:** ![pallavi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pallavi/32/17939_2.png) [@pallavi](https://developer.sailpoint.com/discuss/u/pallavi)\
**Post date:** [December 5, 2024, 7:17pm UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/6 "2024-12-05T19:17:39Z")

</div>

Hi @iamksatish We have not yet executed the role entitlement association task but would like to share another interesting observation:

OOTB - Role Search wizard or the catalog - Role Source Application option does not list the role when searched using the NEW application name present in role. However, if we execute ‘Get All Roles By Application Report’ then it does show the role in the result list for the NEW application.

Same Role based access provisioning also works as expected for the newly added access profile/application in the role bundle.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [February 3, 2025, 7:18pm UTC](https://developer.sailpoint.com/discuss/t/role-bundle-update-deployment-using-ssb-and-issues/91717/7 "2025-02-03T19:18:32Z")

</div>

Closed on February 3, 2025, 7:18pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
