SailPoint ISC - Get and Edit a Before Provisioning Rule

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We use SailPoint ISC, and have configured a Before Provisioning Rule on our Active Directory source.
Now, we want to change this BP Rule, and probably disable it (not removing it as we may need it later).
The problem is that we can’t find an API endpoint that allows us to view/edit the rule. We’ve also check the SailPoint ISC VSCode extension, we were sure that there was a “BP Rules” section, but it seems to be gone now.
Any idea on how to do?
Thanks for helping.

2

hi @khalilgahbiche use below api , you can change the operation
PATCH /beta/sources/{id}
Content-Type: application/json-patch+json

[
{
“op”:“add”,
“path”:“/beforeProvisioningRule”,
“value”:{
“type”:“RULE”,
“id”:“{ruleID}”,
“name”:“{Rule Name}”
}
}
]

1 Like
3

Hi @khalilgahbiche,

Can you export rule object using SP-Config and check whether this BP rule exists in source.

Then you may disable it by just removing it from source using ISC VS code

-Vasant

1 Like
4

Hi @khalilgahbiche ,

Have a look at the below post, to get rules. I think its easy to get rules via API.

  1. Use the export-sp-config | SailPoint Developer Community endpoint to initiate the configuration export.
{
  "description": "Export all available rules",
  "excludeTypes": [],
  "includeTypes": [
    "RULE"
  ],
  "objectOptions": {
        "RULE": {
            "includedIds": ["provide the rule id", "only the rule which matches the provided rule id will be exported"],
            "includedNames": ["provide the rule name", "only the rule which matches the provided rule name will be exported"]
        }
    }
}

includedIds or includedNames any one of this an be given to get a specific rule.

  1. Use this get-sp-config-export-status | SailPoint Developer Community endpoint to check the status of export job.
    You will need to provide the jobId from the last step in the URL of this endpoint. API response should return status as completed.
  2. use this https://developer.sailpoint.com/idn/api/beta/get-sp-config-export endpoint to download the results.
    You will need to provide the jobId from the last step in the URL of this endpoint.

Thanks!!

1 Like
5

Thank you for your reply. The thing is the BP rules don’t show up anymore in the VS code extension.

6

Hi @khalilgahbiche,

You can see that BP rule ID and name under source in VS code.

image
image812×164 12.1 KB

-Vasanth

7

@vasanthrajsp29 , my bad, you’re right

1 Like
8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.