Azure provisioning REST Connection ( Not the Azure AD) - Add Access Through ARS Request

[saqib]

I have created a Privilage in Resource Group Entitlement type , Which allows only Enum / String , I enabled Enum with Reader , Contributor , Owner .

When i request For Resource Group with Reader as Privilage type through ARS and submit request. Provisioning tasks are getting failed. 

I'm not able to view the json  it generated in logs. Response received is null with status code null.

Logs attached, Please let me know if any one implemented the provisioning of resource group.

OOTB JSON is : 

{ "name": "ResourceGroup",
"connection": "userAuth",
"privilegeEntitlement":{"privEntType":"RoleDefinition","privAttrName":"Roles"},
"url": "https://management.azure.com${entitlementValue.customproperty4}/providers/Microsoft.Authorization/roleAssignments/${UUID.randomUUID().toString()}?api-version=2015-07-01",
"httpMethod": "PUT",
"httpParams": "{ \"properties\": { \"roleDefinitionId\": \"${privEntVal.customproperty4}\", \"principalId\": \"${account.accountID}\" } }",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json"
}

[rushikeshvartak]

• Any reason for not using OOTB Azure AD connection ?
• Please share logs in text format 
• Please confirm if its working from postman?

[saqib]

For provisioning of Azure ( Not Azure AD ), Rest is recommended as per docs. and yes it is working form post man.

[stalluri]

@saqib 

OOTB Azure is working fine, May I know why you want to use Rest connector?

[saqib]

OOTB Azure can be used for provisioning , could be please give link in docs which exact one i have to use.

[stalluri]

@saqib 

AzureAD has OOTB.
Azure provisioning we have to use REST.

[saqib]

@stalluri 

Yes we are trying with Azure provisioning using the REST connector , And the problem is on Priv Entitlement. in postman i'm able to provision correctly as im populating all the roledefination details manually.

{ "name": "ResourceGroup",
"connection": "userAuth",
"privilegeEntitlement":{"privEntType":"RoleDefinition","privAttrName":"Roles"},
"url": "https://management.azure.com${entitlementValue.customproperty4}/providers/Microsoft.Authorization/roleAssignments/${UUID.randomUUID().toString()}?api-version=2015-07-01",
"httpMethod": "PUT",
"httpParams": "{ \"properties\": { \"roleDefinitionId\": \"${privEntVal.customproperty4}\", \"principalId\": \"${account.accountID}\" } }",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpContentType": "application/json"
}

[rushikeshvartak]

Share logs

[rushikeshvartak]

• Azure AD connector supports both provisioning and reconciliation from v23.10 onwards 
• Refer https://docs.saviyntcloud.com/bundle/Azure-v24x/page/Content/Understanding-the-Integration-Between-E...

[saqib]

I'm trying to provision for Azure , Not Azure AD.

[stalluri]

@saqib 

Try this 
${entitlementValuesObj.customproperty4}  //role Definition Id is not empty
${account.accountID}           // make sure the principal Id  is not empty



Make sure you have values present in entitlement customproperty4 (ID) and this ID should be referred in entitlementtype customproperty4

${privEntVal.customproperty4}