Createrequest api usage to assign privileges

[JanardhanSharma]

Hi team,

There is a new feature added https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v23/Release-Notes-23-9.htm#:~:text=R....

As per this feature we can request privileges as well. 
It is however not clear though, as to what should be the payload though ?

URI: 

/ECM/api/v5/createrequest

Body:

{
"requesttype":"NEW",
"username" : "userName",
"endpoint":"endpoint/name",
"securitysystem":"open-policy-agent",
"comments":"Requested for testing via postman.",
"requestor":"userName",
"createaccountifnotexists":"true",
"entitlement":[
	{
        "entitlementtype":"type",
        "entitlementvalue":"value",
        "attributename" : "role",
        "attributevalue" : "reader",
        "businessjustification":"Requested for testing via postman." 
    }]
}

 As per the suggestion, we added attributename and attribute value in the entitlement, bit it did not work. 

Any suggestions/help in this regard will be helpful. 

[Dhruv_S]

Hi @JanardhanSharma 

Please add the attribute name and attribute value in privileges parameter and test.

Regards,
Dhruv Sharma
If this reply answered your question, please accept it as Solution to help others who may have a similar problem.

[JanardhanSharma]

Thanks for the response. 
But the solution as suggested did not work. 

Additional observations. 
The attribute `priveleges` is accepted but there is no action being taken in the back end. So most probably the name is incorrect. The serialization is most probably ignoring unknown properties.

When we used `privileges`,  we get 

{
"errorCode": 1,
"message": "Invalid PayLoad - enter privileges in correct format"
}

We played around with various options, but none worked. 

Few samples that we tried. 

"entitlement":[
   {
      "entitlementtype":"open-policy-agent/systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain",
      "entitlementvalue":"systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain/customer-care",
      "privileges":{
         "attributename":"role",
         "attributevalue":"reader"
      },
      "businessjustification":"Requested for testing via postman."
   }
]



------------------------


"entitlement":[
   {
      "entitlementtype":"open-policy-agent/systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain",
      "entitlementvalue":"systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain/customer-care",
      "privileges":{
         "attributeName":"role",
         "attributeValue":"reader"
      },
      "businessjustification":"Requested for testing via postman."
   }
]


-----------------------

"entitlement":[
   {
      "entitlementtype":"open-policy-agent/systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain",
      "entitlementvalue":"systems/a7dc28f1cbba485d9d9fc10bb98ddb20/resource_types/canary_domain/customer-care",
      "privileges":{
         "attributesList":[
            {
               "attributeName":"role",
               "attributeValue":[
                  {
                     "ID":"reader"
                  }
               ]
            }
         ]
      },
      "businessjustification":"Requested for testing via postman."
   }
]​

It would be very helpful if you could try out the api and provide the correct payload. @Dhruv_S

[Dhruv_S]

Hi @JanardhanSharma 

Please refer the below format and confirm.  

{
"requesttype": "NEW",
"username": "userName",
"endpoint": "endpoint/name",
"securitysystem": "open-policy-agent",
"comments": "Requested for testing via postman.",
"requestor": "userName",
"createaccountifnotexists": "true",
"entitlement": [
{
"entitlementtype": "type",
"entitlementvalue": "value",
"businessjustification": "Requested for testing via postman.",
"priveleges": [{

"attributename": "role",
"attributevalue": "reader"
}]
}
]

}

Reference documentation: Saviynt Enterprise Identity Cloud API Reference v23.9 (getpostman.com)

Regards,
Dhruv Sharma
If this reply answered your question, please accept it as Solution to help others who may have a similar problem.