Role Rename Doesn't Actually Change the Name

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Does anyone know how to officially change a role name? We were changing role names within the UI and recently found out that the name isn’t actually changing. SailPoint retains the original name somewhere. We have made numerous name changes as part of a recent role certification campaign and now we don’t have a way to get the list of all roles with the original names. SP customer support stated we should not change role names thru the UI and directed us to use the Patch Role API - patch-role | SailPoint Developer Community. The API does change the name, however, for task reports or the ServiceNow integration the old name still shows up.

2

Did you do an “Appy Changes” after the name update? I did a quick test and my the old name on my test role still showed up in IDN Search until I hit “Apply Changes”.

3

Hi Ben, thanks for the response. The name changes in the UI, however, if you perform let’s say a certification review of the Role, it will still show the old name. There is something on the back end that the role name doesn’t officially change.

4

Hi @RArroyo,

Is the certification review for the role before or after the role rename?

5

After the role rename.

6

I would be curious to see if you followed this sequence, what would happen:

  1. Rename role
  2. Apply Changes
  3. Process Identities
  4. Launch cert instance

I am wondering if the cert review is taking object values at the time of instantiation and didn’t wait for everything to be synced up on changes. Just a wild theory.

7

Hi Renee, I never did with Roles, but when I renamed Sources, the internal name remains the same. In fact, I have deleted sources and when trying to create a new one with old name, it says that the source exists. I think you can submit a case to Sailpoint and ask them to perform the rename of the roles.

Maybe there is other possibility, but I have tried only with sources, but perhaps it works with roles.

Let use the sp-config API calls to export the ROLE you want to rename. Put the result in some text editor (vs code is great), and search and replace you role name with the new one. Please keep all the “id” attributes intact, and import this file again into the same tenant.

In my case I was trying to clone sources this way, but realized that not deleting the “id” attributes renamed actual source instead of creating a new one. So, perhaps behaviour for roles could be the same.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.