SailPoint IdentityIQ: Batch Request : Bulk Operations
SailPoint
IdentityIQ comes with a most desired and important feature of Bulk Operations.
This feature is known as Batch Requests which is available
under "Setup" menu. This feature allow us to execute bulk
operations by passing csv file as input. We can use these Batch Requests with
many additional configurable properties like Generation of Access Requests,
Stopping execution in case of errors etc.
Here are the
list of operations which are supported by Batch Requests:
·
Create Identity (User)
·
Modify Identity (User)
·
Create Account
·
Delete Account
·
Enable Account
·
Disable Account
·
Unlock Account
·
Assign Role (Add Role)
·
Revoke Role (Remove Role)
·
Provision Entitlement (Add Entitlement)
·
Revoke Entitlement (Remove Entitlement)
·
Change Password
Remember:
1. For Modify Identity, make sure that fields are editable which you want to modify through Batch Requests, else you will get exception
2. Use Pipe ( | ) to assign/revoke multiple roles or entitlements
3. Following operations with similar data and columns cannot be done through same csv file:
o Create Identity
o Modify Identity
o Change Password
Examples:
Create Identity
operation,
name, email, department, costcenter, firstname, lastname, manager, userType,
employeeNumber
CreateIdentity, CFRGUSON, cfrguson@example.com,
IAM, 1011, Craig, Frguson, asmith, Contractor, 00125
Modify Identity
operation, identityname, email, department, costcenter, firstname, lastname,
manager, userType, employeeNumber
ModifyIdentity, BSmeeth, bsmeeth@example.com,
IAM, 1022, Bob, Smeeth, ssmeeth, Employee, 00122