Hi!
Thanks, that helped me figure it out. I thought I could only edit from the API.
I take this opportunity to ask you, for example, if I want to do a bulk upload of 100 profiles, can I add a contributor from the bulk upload so I don’t have to do it profile by profile?
Thanks in advance for your support.
Yes, you can as long as you provide the sponsor information which can be used to map them. For example, if you have csv file with manager email, then as long as it matches the /users email, then you can populate it. You can use name, email or login to map the sponsor information. Any deviation will result in value not getting populated. Let me know if you need any information.
Thank you for your response.
I mean, do I need to save that “email” or “login” in some attribute and then run some workflow?
Or the way to do it is to map that “mail” or “login” to some attribute already defined in NERM during the CSV import?
You don’t need to run any workflow, just map them to the attribute during your CSV Import, like below:
Really appreciate it!
@DerekHackbardt
I’m yet again seeing that once i’m assigning a sponsor roles to system users using REST API, they’re automatically getting cleared up by NERM system. Do you have any insights around this?
You should be able to do using /user_role and here is the sample body
{
“user_role”: {
“user_id”: “00a2e940-9711-4c36-bd91-c0c844f2b3ed”, // user id
“role_id”: “27f46dcc-265c-414a-9b05-55a9a69d49ae” // role id
}
}
Make sure you are assigning via the /user_role api and are not sending any values in the groups SSO assertion attribute. Anything in the assertion will always override values set via /user_roles.
Thanks for response @DerekHackbardt @sunnyajmera. Let me give that a try.
I’ve been assinging users to roles using /users endpoint using GROUP_STRINGS in the JSON body. But from your response, looks that this would be overridden.
@DerekHackbardt @sunnyajmera
Just a quick question, If I upload the system users using “Import” button under System users tab, along with their role values, will they be cleared up as well by NERM system? Or would they be retained until manually removed by API?
No, it won’t clear or override the roles.
@sunnyajmera Unfortunately, NERM seems to clear the system user roles even with manual import.
Hello, @Arshad
Have you found any answers to this?
I also have Identitynow as IdP, and I want to add users to a role that has the group “Approvers_Group” but not being able to customize it in IdentityNow I think I have to create the user in NERM and then manually assign the role, but you comment that the manual assignment with the endpoint “/api/user_role” does not persist, right?
What will be the correct way to do this or to get it to work as we want.
And another doubt, after how long do you see that NERM deletes the manually assigned role?
Greetings!
That’s true, the roles will be overridden if you have SSO configured and I think as soon as the users logs in, the roles get overridden.
The roles don’t get overridden, when the user logs in, they are overridden only when you make changes to the user access in ISC.
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.