Update manager email while account provisioning

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Team,

Anyone tried to update manager email address while account creation for a particular source

or

Written transform rule while provisioning to update user’s manager email id?

2

@asriva14 You can use rule transform in you create profile where you just need to pass the operation and attribute name that you want to get

{
    "attributes": {},
    "isRequired": false,
    "multi": false,
    "name": "manager",
    "transform": {
        "attributes": {
            "uid": {
                "attributes": {
                    "name": "manager"
                },
                "type": "identityAttribute"
            },
            "name": "Cloud Services Deployment Utility",
            "attributeName": "email",
            "operation": "getReferenceIdentityAttribute"
        },
        "type": "rule"
    },
    "type": "string"
}

You can also create a transform and have it in your identity profile so that you can use that in all the sources that you want (map the identity attribute to the create profile)

{
    "name": "Transform_Manager_email",
    "type": "rule",
    "attributes": {
        "uid": {
            "attributes": {
                "name": "manager"
            },
            "type": "identityAttribute"
        },
        "name": "Cloud Services Deployment Utility",
        "attributeName": "email",
        "operation": "getReferenceIdentityAttribute"
    },
    "internal": false
}

Please find the documentation below:
Rule | SailPoint Developer Community

1 Like
3

Hi Anjali,

The best way is to use the transform in the Create Account profile for a specific source,

For example

{
    "name": "managerEmail",
    "transform": {
        "attributes": {
            "name": "Cloud Services Deployment Utility",
            "attributeName": "email",
            "operation": "getReferenceIdentityAttribute"
        },
        "type": "rule"
    },
    "attributes": {},
    "isRequired": false,
    "type": "string",
    "isMultiValued": false
}

Regards,
Karthi

2 Likes
4

Hi @Karthikeyan_U, I written code as
{
“name”: “Account”,
“description”: null,
“usageType”: “CREATE”,
“fields”: [ {
“name”: “Manager_Email__c”,
“transform”: {
“type”: “rule”,
“attributes”: {
“name”: “Cloud Services Deployment Utility”,
“attributeName”: “email”,
“operation”: “getReferenceIdentityAttribute”
}
},
“attributes”: {},
“isRequired”: false,
“type”: “string”,
“isMultiValued”: false
}]
}

However, under Manager_Email__c it’s not showing the rule that I’ve posted via API call

image
image1016×338 12.4 KB

5

Hi @asriva14 ,

Try something like below

{
    "name": "managerEmail",
    "attributes": {},
    "isRequired": false,
    "type": "string",
    "isMultiValued": false,
    "transform": {
        "attributes": {
            "values": [
                {
                    "type": "rule",
                    "attributes": {
                        "name": "Cloud Services Deployment Utility",
                        "attributeName": "email",
                        "operation": "getReferenceIdentityAttribute"
                    }
                },
                {
                    "attributes": {
                        "value":""
                    },
                    "type": "static"
                }
            ]
        },
        "type": "firstValid"
    }
}

Regards,
Karthi

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.