Upload new Cloud Rules

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello community!

I would like to be more autonomous in managing and uploading Cloud Rules to ISC, without requesting every time the intervention of the Expert Services.
After some searches online I found this post about Download, Version, and Update IdentityNow Cloud Rules, however, it seems that it can be used to only update an already existing rule.

Is there a way to upload new Cloud Rules?

2

Hi Marco,
You cannot create or update the cloud rule without ES support. Even in the post it is instructed that the SailPoint ES should be used to upload (update) the existing cloud rules. Also currently the CC APIs are obsolete to get the cloud rules.

  • New Cloud rules or updating existing cloud rules can be done only through ES support
  • You can use sp-config to export and import the existing cloud rules into a same or a different tenant.
3

Hi Marco,

We share the same needs, and SailPoint has acknowledged the frustrations expressed by customers.

4

Hi @Nicolas_NAPOLEONI,

Yes, you are right about the difficulty of testing cloud rules. SailPoint should add something similar to connector rules

-Mehul

5

On that note of cloud rules, what is the API to GET/download cloud rules for a tenant?
We have a bunch of cloud rules where the source code was not saved in a CM platform and need to be able to view/change them
Thanks

6

Hello @mario_rod ,

Try using sp-config api for getting(exporting) cloud rules.

-Mehul

7

Hi @mehuljogi
I don’t see where cloud rules can be downloaded. None of the GET endpoints seem to have that info:

image
image420×406 26.6 KB

8

Hi @mario_rod
As @mehuljogi said , It will be Sp-Config export Api(export-sp-config | SailPoint Developer Community)

Follow this approach :Sp-config Rules Exported - #7 by tyler_mairose