SailPoint IdentityIQ comes with a most desired and important feature of Bulk Operations. This feature is known as Batch Requests which is available under "Setup" menu. This feature allow us to execute bulk operations by passing csv file as input. We can use these Batch Requests with many additional configurable properties like Generation of Access Requests, Stopping execution in case of errors etc.
Here are the list of operations which are supported by Batch Requests:
- Create Identity (User)
- Modify Identity (User)
- Create Account
- Delete Account
- Enable Account
- Disable Account
- Unlock Account
- Assign Role (Add Role)
- Revoke Role (Remove Role)
- Provision Entitlement (Add Entitlement)
- Revoke Entitlement (Remove Entitlement)
- Change Password
Remember:
- For Modify Identity, make sure that fields are editable which you want to modify through Batch Requests, else you will get exception
- Use Pipe ( | ) to assign/revoke multiple roles or entitlements
- Following operations with similar data and columns cannot be done through same csv file:
- Create Identity
- Modify Identity
- Change Password
Create Identity
operation, name, email, department, costcenter, firstname, lastname, manager, userType, employeeNumber
CreateIdentity, CFRGUSON, cfrguson@example.com, IAM, 1001, Craig, Frguson, asmith, Contractor, 00025
Modify Identity
operation, identityname, email, department, costcenter, firstname, lastname, manager, userType, employeeNumber
ModifyIdentity, BSmeeth, bsmeeth@example.com, IAM, 1002, Bob, Smeeth, ssmeeth, Employee, 00022
Disclaimer
