IDN - Bulk Access Profile and Role Importer - csv file help

Implement & Extend
1

Hello! I’m having trouble using the bulk importer (https://community.sailpoint.com/t5/Professional-Services/IdentityNow-Bulk-Access-Profile-and-Role-Importer/ta-p/77382), and was hoping for an example of a CSV file.

I’m trying to create Access Profiles. Right now, my CSV just has one row for a test access profile that looks like this:

createAccessProfile,ACCESS PROFILE NAME,ACCESS PROFILE DESC,APP NAME,Roles:ENTITLEMENT_NAME,Firstname Lastname,SOURCE_OWNER,false,true,

I’m struggling with getting it to run though. I’m getting the error message:

There is a problem with provided values, possible problems are : name is not present, description not present, source not present or does not exist, owner not present or does not exist, entitlement list not properly formatted or an entitlement does not exist in the system.

I think something might be off with my formatting - either how I’m entering in the entitlements, or the access profile owner. For entitlements, it says to use “attribute1:value1” as the formant. I’m not sure what that means though. The entitlements in my system are named things like WAREHOUSE_SUPERVISOR. Not sure what the attribute is.

Also not sure how to enter the access profile owner - I’ve tried firstname lastname, email, internal ID, account name, etc.

If anyone has an example of a csv file that they imported, that would be super! I’m just trying to hammer down the formatting of everything!

2

this tool stopped working for me months ago. even previously working files error out.

Here’s a sample of what I’ve used to add

createAccessProfile,Sales,conatins the access for a Sales,Active Directory,Assoc;PhyInv_SA;PhyInv_UAT;Prd_Store_User,2344616,FALSE,FALSE

That owner ID, I can’t even find anymore. I used to have an API which I think was /cc/  which pulled that ID for a given identity. I don’t see it on the roles anymore though. the owner details are ID 2c9150899be56566017c03eb515226d7   and name

The older version of the tool stopped working, so I needed to use the new one, and the documentation surrounding it is more confusing than anything. I honestly think it’s easier to build things by hand in the UI now.  it shouldn’t be this complex to create access profiles and roles in bulk.

3

Very complex tool to understood.

4

I used the tool a few days go and was working. Please download the latest, I believe the underlying APIs got deprecated and the latest has addressed it, also maybe some parameters have changed, please double-check.

Regarding the attribute:name, in your example Roles:ENTITLEMENT_NAME, please check under your Sources > YourSourceName > Account Schema if “Roles” is the name of the attribute listed there. In my case it was “groups”.

Here is the example I used:
“createAccessProfile”,“Test Access Profile”,“Description here”,“ServiceNow SourceName”,“groups:Entitlement Name”,“ed.lastname”,“”,“FALSE”,“TRUE”,“”,“”,“”