Role details along with start and end date in SAP application connector

Which IIQ version are you inquiring about?

8.4p1

Please share any images or screenshots, if relevant.

Please share any other relevant files that may be required (for example, logs).

Role Details
9W1ODE>C-PTC-CALC-KAM_DEALL#2026-01-06#9999-12-31

Share all details about your problem, including any error messages you may have received.

I have doubt that in above screenshot after provisioning we can see role details from application accounts of an user how date is appended to role value is it OOTB feature or we can edit anywhere inside SailPoint

@kchengalvarayan

Highlighted part from your image is schema attribute for specific application(Form Attribute). You can write custom rule to update it only for SailPoint.

@kchengalvarayan

I would not suggest you to modify/update these dates in the Role Details field. When a role is assigned to an SAP account, the assignment date and an end date(most of the cases defaulted to 9999-12-31) is added in the target system (SAP) itself.

As part of the aggregation you receive that details back to SailPoint. If you want to control the Role assignment dates from SailPoint, I suggest to leverage sunrise/sunset dates during your assignment.

Let me know if any questions.

Regards,
Uday

if you want to update a field value as per your requirement you can use Customization Rule to modify and set it.

we are newly implementing sunrise and sunset we want dates provided by user at time access request to be reflecting in that role details where as for valid from and valid to in SAP provisioning policy we have separate logic

But role details values are aggregated from SAP its not custom attribute in schema we added.

Hi Uday,

we are newly implementing sunrise and sunset we want dates provided by user at time access request to be reflecting in that role details where as for valid from and valid to in SAP provisioning policy we have separate logic. as these role details are updated in link as part of aggregation is this OOTB function or it is logic defined anywhere in workflow or rules.

Thanks.

Karthikeyan D C

Just to be sure, can you confirm you are using the OOTB SAP Direct connector?

Hi Uday,

yes we are using OOTB SAP direct connector, we are updating valid from and valid to dates for account in account level but we need to update start date and end date for individual role which user is requesting. is there anyway can we set start date and end date in SAP using provisioning plan.

we are already having start end and end date in provisioning plan but I’m stuck now how to update the same in SAP for individual role.

Though there is no enough document support on this attribute, Since it is supported account schema attribute, I would suggest to try updating the attribute through Before provisioning rule based on the information in the ProvisioningPlan (w.r.t sunset date) in the same format that it is aggregated (Value#startdate#enddate) with date being in yyyy-mm-dd format.

However, please be cautious in updating the right one, when the user is part of multiple roles.

Thanks for the input, we update the role appending with start date and end date that kind of role will not will available in SAP. SailPoint entitlement value and SAP role is the common correlator on provisioning.