IdentityNow Bulk Role Importer

Hello team,

Can this tool be updated with the latest API endpoints? https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-AccessProfile-and-Role-Importer/ta-p/77382

While using the tool, we are getting errors. Upon reviewing the code, it looks like the application functions are using /cc/api endpoints which no longer work.

C:/zzz/Role-Importer/BulkImport/roleImporter.rb:368:in `generate_applicationNameVsIdAppIdMap’: undefined local variable or method `json’ for main:Object (NameError)

puts “ERROR : Role Importer Tool : Application Hash Map Creation Failed: #{json[‘error’]}”
^^^^
Did you mean? JSON
from C:/zzz/Role-Importer/BulkImport/roleImporter.rb:1032:in `<top (required)>’
from C:/Ruby32-x64/lib/ruby/gems/3.2.0/gems/ocra-1.3.11/bin/ocra:1239:in `load’
from C:/Ruby32-x64/lib/ruby/gems/3.2.0/gems/ocra-1.3.11/bin/ocra:1239:in `<top (required)>’
from C:/Ruby32-x64/bin/ocra:32:in `load’
from C:/Ruby32-x64/bin/ocra:32:in `<main>’

Thanks,

Aparna

@rallabhandiaparna  Aparna, good catch! Subscribed - in the meantime since this is API related you may want to also ask over in theIdentityNow Developer Discussion Forum.

Hi @rallabhandiaparna  That is one of the many issues that a developer community ambassador pointed out in his post with attached pdf, which you can find here (some workarounds included):

I will attempt to identify who owns this PS tool and ask if/when a new version of the tool using the non-deprecated APIs might become available.

In the meantime, have you considered using the Configuration Hub to promote Access Profiles, Roles, and other objects between tenants? This is one of the many benefits of the Configuration Hub, using “Tenant Connections” - much simpler than scripts and APIs. (And It’s one of my favorite new features within the past few quarters.)

Amy, great informtaion - I hadn’t made that connection. Kudos! :slightly_smiling_face:

Hello Amy,

Our requirement is to not just import the roles, but bulk update the existing roles. We either use the bulk importer tool or create our own PS script to do this.

I reviewed the article published by the ambassador, unfortunately, there is no workaround for the /cc/api issues.

Regards,

Aparna

Thanks Aparna. Got it.

In looking at the code, the parts that are using cc/api are for applications, and there isn’t a v3 or beta replacement ready for those yet. I was informed by the PS team that when the replacements become available, they will update the tool. But for now, they cannot. Thanks for your understanding.

If this is a timely need, perhaps you may need to:
a.) extract the part of the tool/code that just does the updates and use that (obviously would take a bit of work)
b.) OR write your own custom script that does Role Updates. There are v3 role PATCH endpoints to do that now (Then you can leverage config hub for any transfer/promotion between tenants, if you need to do that)
c.) OR PS can also be engaged to write a custom script, but that could incur a cost, depending on the contract type purchased with ISC.

It sounds like you/your team have the coding skills to write a script. But I know that a pre-built tool is always more convenient!

You can track the new/deprecated/promoted endpoints here. (Watch for the /apps ones):

Hello @rallabhandiaparna ,

When you have a chance, please do not forget to mark replies as solutions which includes your own. By doing so, you will greatly benefit other users who later have the same question and looking for any additional resources in the community.

For more information on accepting solutions, please refer to the community guide, How to: Accept as solution.

As a side note, great work on adding a label to your post, sharing the Compass article you’ve read, and providing the error code that you encountered.

Thanks!

Thank you Amy. We will continue with our custom script for now. Hoping this tool will be updated as soon as the necessary V3/Beta endpoints are released.

Regards,

Aparna