Add entitlement to role via api

[travemole]

Dear All,

I'm trying to add some entitlements to some roles but the api is failing all the time saying that the entitlement type does not exist:

{{lab_url}}/ECM/{{path}}/createUpdateEntitlement

{

    "endpoint": "Azure LAB",

    "entitlementtype": "AADGroup",

    "entitlement_value": "Backup Jeorme",

    "entitlementmap": [

        {

            "entitlementvalue": "Google Looker Admin",

            "entitlementtype": "Role",

            "endpoint": "Application Testing",

            "requestfilter": "1",

            "excludeentitlement": "0",

            "adddependenttask": "1",

            "removedependententtask": "1",

            "updateType": "ADD"

        }

    ]

}

I've seen that we have the api: {{url}}/ECM/{{path}}/removeEntitlementsFromRole to remove entitlements from roles but seems that we dont have the same to add. Is there a proper way to do this via the api?

Kind regards,

Albert.

[SumathiSomala · Accepted solution]

@travemole try with below api

{{url}}/ECM/{{path}}/updateEnterpriseRoleRequest

sample payload

{  

   "roletype":"ENTERPRISE",

   "role_name":"TestRoleEnt123",

   "requestor":"admin",

   "owner": [

    {

        "ownerName" :"G000526",

        "updateType": "REMOVE"

    },

    {

        "ownerName":"U003961",

        "updateType":"ADD"

    }

   ],

   "customproperty36":"cp36modified",

   "endpointname":"Workday",

   "entitlements" : [

        {

    "entitlement_value":"FIXED_ASSET_INQUIRY_TECH_IN",

    "entitlementType" : "OEBS-Responsibility",

    "endpoint" : "Oracle",

    "updateType" : "ADD"

    },

        {

    "entitlement_value":"FIXED_ASSET_INQUIRY_SOFT_IN",

    "entitlementType" : "OEBS-Responsibility",

    "endpoint" : "Oracle",

    "updateType" : "ADD"

    }

   ]

}

[travemole]

HEllo @SumathiSomala ,

Does this work with normal roles also? The roles I'm using are application roles not enterprise roles.

Kind regards,

Albert.

[SumathiSomala]

@travemole i haven't tested but it will work .

See the screenshot attached .it will also work for

roletype Use the roletype as "ENTERPRISE" to Update Enterprise Role Request. (supported roletypes are - ENABLER/ TRANSACTIONAL/ FIREFIGHTER/ ENTERPRISE/ APPLICATION),

Specify 

 "roletype":"APPLICATION",

Saviynt Enterprise Identity Cloud API Reference v23.6 (getpostman.com)

[travemole]

Perfect, just what I was missing. Thanks a lot!