Adding/removing Application Roles from user using REST API.

[Anurag]

We were using /createrequest API to add/remove all type of roles from user on Saviynt version 5.5SP3.06, recently we had an upgrade to 5.5SP3.13 and this API started to fail with error "Invalid role found in request.." while trying to request Application role.

Assuming this is the expected behavior of /createrequest API in new version, do we have any alternate API to request/remove application roles.

We are referring below api documentation.

https://documenter.getpostman.com/view/1797923/TVsvi7G2?version=latest#96007153-b13a-4bcd-b46a-d2eec...

Thanks

[prasannta]

The API should work in the new version too. Can you share the JSON you are sending while invoking the API?

[Anurag]

PrachiTestRole10 is an Application role, tried adding this using below payload by keeping "roletype":"APPLICATION".

{

"accesstype":"ROLES",

"username":"prachi_deshpande",

"roletype":"APPLICATION",

"requesttype":1,

"roles":[

    { 

"rolename" : "PrachiTestRole10"

} ],

"requestcomments":"test",

"requestor":"prachi_deshpande"

}

also tried using "roletype":"FIREFIGHTER" and "roletype":"ENTERPRISE", getting the same error for all payloads.

[prasannta]

Are you seeing any errors in log? Also can you check if the role is active?

[Manu269]

@Anurag did you first try invoking Get Role Details to fetch the details?

I believe you need to pass the numeric value for Role Type.

Can you try this :

{

    "requesttype": "ADD",

    "username": "test1pcsqs",

    "endpoint": "Workday",

    "securitysystem": "Workday",

    "createnewaccounttaskifnotexist": "TRUE",

    "entitlement": [

        {

            "entitlementtype": "Security-Groups",

            "entitlementvalue": "1099 Analyst",

            "startdate": "12-23-2020",

            "enddate": "12-30-2020",

            "businessjustification": "test business justification"

        }

    ],

    "roles": [

        {

            "rolename": "workdayapprole",

            "businessjustification": "justified",

            "startdate": "12-23-2020",

            "enddate": "12-30-2020"

        }

    ],

    "checksod": "true"

}

[plakhangaonkar]

@prachi , is your application role API issue resolved? I am facing similar issue. If resolved, could you please share the details.