Is it possible to remove user group from Multiple System with SailPoint ISC GRC Integration. As per the connector document Additional Information
User group can be passed as list of string in the format : -
systemNameA/GroupName1 & the operation is ‘Set’ mentioned in the document. Does it support Remove operation for this attribute or using the ‘Set’ operation only is it possible to set the User Group attribute to blank.
I am also facing an issue to pass multiple User Group for multiple system. From SailPoint side I am able to see two groups are getting passed as a List. But in GRC side access request only one group is getting passed. Have anyone faced this issue ?
Hi, regarding setting the User Group as blank value I believe this is not supported I tried different ways like all blank ““ or white space “ “ or even “system/“ but still does not work and raised ticket regarding that topic and seems it is not supported by connector as it expects system/group.
so the workaround here is to have a User Group set from SAP side with value like DEACTIVATED for example. And instead of nullifying the user group you can set it to this value
Based on the available information, the SailPoint ISC GRC Integration supports the Set operation for user groups, where a list of user groups (e.g., systemNameA/GroupName1) can be passed. However, there is no explicit mention of a Remove operation for this attribute. To remove a user group, setting the attribute to blank using the Set operation may be possible, but this depends on the connector’s behavior. Can you please try setting the attribute blank and see if it works ?