Synchronizing individual role within ISC

[rt111 (Ricardo Then)]

Hello,

My organization has multiple roles within ISC for different purposes. Sometimes I make changes to a single role, and would like to apply the changes / do a synchronization on that given role to start adding / removing users to a given local AD group instead of doing a bulk synchronization. Is this do-it able? Or is the only option to apply changes on a role is by making the change, and clicking on Apply changes within the Roles tab (which triggers a bulk synchronization)?

Thank you,
Ricardo T.

[Sachin_Rajathadri]

Hi @rt111,

Here are the 2 links I found to answer your question,

@dominick-miller

I have been speaking with my SailPoint expert services representative and it seems like the only solution to automate “Apply Changes” is by using the /beta/identities/process endpoint (start-identity-processing | SailPoint Developer Community ).

POST /api/role/refresh

No public API replacement is planned for this endpoint before the March 31st, 2024 deadline. To initiate a role refresh, you can select “Apply Changes” in the roles user interface to refresh roles for all identities. Alternatively, you can use the following APIs to process one or more identities, which will result in roles being recalculated for the identities being processed. For more information on applying role changes, please see this document.

I hope this helps!