Hi everyone,
I'm encountering a challenge while importing roles from Coupa into Saviynt. There isn't a dedicated endpoint for roles in Coupa, and the user endpoint bundles roles into an array. When I test the call with Postman, it correctly returns multiple role objects within a "roles" array.
However, when I use the same call in Saviynt's ImportAccountEntJSON, it imports the array as a single nested role, instead of two separate roles. Below is the relevant part of my JSON configuration and the response I get from Postman:
ImportAccountEntJSON
{
"globalSettings": {
"dateFormat": "yyyy-MM-dd'T'HH:mm:ss'Z'"
},
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"call": {
"call1": {
"callOrder": 0,
"listField": "",
"keyField": "accountID",
"http": {
"url": "https://xxxx.coupahost.com/api/users?fields=%5B%22id%22%2C%22email%22%2C%22login%22%2C%22active%22%2...",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
}
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 10000
}
},
"colsToPropsMap": {
"accountID": "id~#~char",
"name": "login~#~char",
"status": "active~#~char",
"customproperty5": "active~#~char",
"customproperty1": "email~#~char",
"customproperty2": "firstname~#~char",
"customproperty3": "lastname~#~char",
"customproperty4": "mention-name~#~char",
"customproperty7": "active~#~char",
"customproperty14": "created-at~#~char",
"customproperty15": "sso-identifier~#~char",
"customproperty16": "employee-number~#~char",
"customproperty31": "STORE#ACC#ENT#MAPPINGINFO~#~char"
}
}
}
},
"entitlementParams": {
"processingType": "SequentialAndIterative",
"entTypes": {
"Role": {
"entTypeOrder": 0,
"entTypeLabels": {},
"call": {
"call1": {
"connection": "acctAuth",
"callOrder": 0,
"stageNumber": 0,
"http": {
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"url": "https://xxxx.coupahost.com/api/users?id=2&fields=%5B%7B%22roles%22%3A%5B%22id%22%2C%22name%22%2C%22d...",
"httpContentType": "application/json",
"httpMethod": "GET",
"successResponses": {
"statusCode": [200]
}
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 100
}
},
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "roles.id~#~char",
"entitlement_value": "roles.name~#~char",
"description": "roles.description~#~char"
}
}
}
}
}
},
"acctEntParams": {}
}
Postman Response:
[
{
"roles": [
{
"id": 3,
"name": "User",
"description": "Standard role for all users who need to create and/or approve requisitions"
},
{
"id": 10000,
"name": "Read Only",
"description": "Custom Role that adds read only ability to view transactional data. Please note, this role requires on-going maintenance when new features are added."
}
]
}
]
I attempted the following configuration in my ImportAccountEntJSON, but it only imports the first role without nesting and does not recognize the subsequent roles as separate entries:
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "roles[0].id~#~char",
"entitlement_value": "roles[0].name~#~char",
"description": "roles[0].description~#~char"
}
Has anyone successfully mapped the array of roles objects to entitlements in Saviynt? Could you please share your approach or any suggestions you might have?
Much appreciated!
Hi Mark,
We had a similar requirement where only our acc to ent mapping was nested, and the work around we found was to update nested roles into the syntax of the customproperty31 (used for accounttoentitlement mapping).
So instead of using:
"customproperty31": "STORE#ACC#ENT#MAPPINGINFO~#~char"
Try with:
"customproperty31": "#CONST#${String output1=response.roles.replaceAll(', ','\",\"'); beg= ' {\"Group\":{\"entIds\":[\"'; end= '\"],\"keyField\":\"entitlementID\"}}' ; output2= beg.concat(output1) ; finoutput= output2.concat(end) ; return finoutput}~#~char".
The idea is to bring it to this format which Saviynt would understand (Please replace the bold words as per your configuration)
Hope this helps.
Many thanks for the the information; as you can see in the attached image, I now have the roles in the account customproperty31. However, how can I import them as entitlements instead of just a portion of the account cp31?
This is our ImportAccountEntJSON:
{
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"statusAndThresholdConfig": {
"accountsNotInImportAction": "Suspend",
"accountThresholdValue": 100
},
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://xxx.coupahost.com/api/users?fields=%5B%22id%22%2C%22email%22%2C%22login%22%2C%22active%22%2C...",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
}
},
"listField": "",
"keyField": "accountID",
"statusConfig": {
"active": "true",
"inactive": "false"
},
"colsToPropsMap": {
"accountID": "id~#~char",
"name": "login~#~char",
"status": "active~#~char",
"customproperty5": "active~#~char",
"customproperty1": "email~#~char",
"customproperty2": "firstname~#~char",
"customproperty3": "lastname~#~char",
"customproperty4": "mention-name~#~char",
"customproperty7": "active~#~char",
"customproperty14": "created-at~#~char",
"customproperty15": "sso-identifier~#~char",
"customproperty16": "employee-number~#~char",
"customproperty31": "#CONST#${String roles = response.roles.collect{ '\"' + it.id+ '\"' }.join(', '); return '{\"Role\":{\"entIds\":[' + roles + '],\"keyField\":\"entitlementID\"}}';}~#~char"
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 10000
}
}
}
},
"acctEntMappings": {
"Role": {
"importAsEntitlement": true,
"listPath": "roles",
"idPath": "id",
"keyField": "entitlementID"
}
}
},
"entitlementParams": {
"processingType": "SequentialAndIterative",
"entTypes": {
"Role": {
"entTypeOrder": 0,
"entTypeLabels": {},
"call": {
"call1": {
"connection": "acctAuth",
"callOrder": 0,
"stageNumber": 0,
"http": {
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"url": "https://xxx.coupahost.com/api/users?id=2&fields=%5B%7B%22roles%22%3A%5B%22id%22%2C%22name%22%2C%22de...",
"httpContentType": "application/json",
"httpMethod": "GET",
"successResponses": {
"statusCode": [200]
}
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 100
}
},
"listField": "roles",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "name~#~char",
"description": "description~#~char"
}
}
}
}
}
},
"acctEntParams": {
"processingType": "acctToEntMapping"
}
}
I have used the above but it doesn't seem to work, the response from postman includes a role root which I don't see that we are using it in the entitlementParams(), I attach the json I am using but it doesn't import anything and the logs, the endpoint is called cp13.
@rushikeshvartak @Shreya-B Any idea how to import the roles correctly?
{
"accountParams": {
"connection": "acctAuth",
"processingType": "SequentialAndIterative",
"statusAndThresholdConfig": {
"accountsNotInImportAction": "Suspend",
"accountThresholdValue": 100
},
"call": {
"call1": {
"callOrder": 0,
"stageNumber": 0,
"http": {
"url": "https://xxx.coupahost.com/api/users?fields=%5B%22id%22%2C%22email%22%2C%22login%22%2C%22active%22%2C...",
"httpContentType": "application/json",
"httpMethod": "GET",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
}
},
"listField": "",
"keyField": "accountID",
"statusConfig": {
"active": "true",
"inactive": "false"
},
"colsToPropsMap": {
"accountID": "id~#~char",
"name": "login~#~char",
"status": "active~#~char",
"customproperty5": "active~#~char",
"customproperty1": "email~#~char",
"customproperty2": "firstname~#~char",
"customproperty3": "lastname~#~char",
"customproperty4": "mention-name~#~char",
"customproperty7": "active~#~char",
"customproperty14": "created-at~#~char",
"customproperty15": "sso-identifier~#~char",
"customproperty16": "employee-number~#~char",
"customproperty31": "#CONST#${String roles = response.roles.collect{ '\"' + it.id+ '\"' }.join(', '); return '{\"Role\":{\"entIds\":[' + roles + '],\"keyField\":\"entitlementID\"}}';}~#~char"
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 10000
}
}
}
},
"acctEntMappings": {
"Role": {
"importAsEntitlement": true,
"listPath": "roles",
"idPath": "id",
"keyField": "entitlementID"
}
}
},
"entitlementParams": {
"processingType": "SequentialAndIterative",
"entTypes": {
"Role": {
"entTypeOrder": 0,
"entTypeLabels": {},
"call": {
"call1": {
"connection": "acctAuth",
"callOrder": 0,
"stageNumber": 0,
"http": {
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"url": "https://xxx.coupahost.com/api/users?id=2&fields=%5B%7B%22roles%22%3A%5B%22id%22%2C%22name%22%2C%22de...",
"httpContentType": "application/json",
"httpMethod": "GET",
"successResponses": {
"statusCode": [200]
}
},
"pagination": {
"offset": {
"offsetParam": "offset",
"batchParam": "limit",
"batchSize": 50,
"totalCountPath": 100
}
},
"listField": "",
"keyField": "entitlementID",
"colsToPropsMap": {
"entitlementID": "id~#~char",
"entitlement_value": "name~#~char",
"description": "description~#~char"
}
}
}
}
}
},
"acctEntParams": {
"processingType": "acctToEntMapping"
}
}
