Unable to create Entitlement based role request

[plakhangaonkar]

Hello Team,

We are trying to create Entitlement based role request. Below is the request JSON. We are getting "

Invalid role found in request.." error in API call. Please advise.

[dgandhi]

As per the API documentation , Role type= Application is not specified.

https://documenter.getpostman.com/view/1797923/SzzgAepY#e20ba529-ab2b-4ae3-89f9-959ac1ccb6ff

Can you please paste the API reference link?

Thanks

[plakhangaonkar]

Hi,

Thank you for the response. We are sending the roletype as Application in json body. Please refer to the screenshot in this forum.

JSON body for your reference:

{

"accesstype": "roles",

"requestor": "admin",

"roletype": "APPLICATION",

"entitlementtype": "AppRole",

"securitysystem": "EManager Bank 502 Test",

"endpoint": "EManager Bank 502 Test",

"requesttype": 1,

"role_name": "Demo502Test2",

"displayname": "Demo502Test2",

"description": "Demo502Test2",

"customproperty21": "Security",

"customproperty22": "1",

"customproperty23": "0",

"soxcritical": "3",

"syscritical": "3",

"privileged": "3",

"confidentiality": "3",

"username": "admin",

    "entitlements": [

        {

            "entitlement_value": "Demo502Test2 : Testing entitlement functionality",

            "entitlementType" : "AppRole"

        }

    ]

}

The API reference link:

https://company.saviyntcloud.com/ECM/api/createrequest

[This post has been edited by a Moderator to remove sensitive information.]

[dgandhi]

It seems you are using the wrong API. Please use below one

{{url}}/ECM/{{path}}/createEnterpriseRoleRequest

Document: 

https://documenter.getpostman.com/view/1797923/2s83mbojGM#fc85097b-188a-4b75-9ea7-d109e4b681e6

[prachi]

We are looking to create Application role with Entitlement, will this API support Application role creation as well?

As per the documentation and our testing it was not working.

[dgandhi]

Yes, Application Role can be created via API. Can you please try with below body?

{
"roletype":"Application",
"role_name":"testRole4",
"requestor":"admin",
"owner":"gbana5",
"endpointname":"amigopod"
}

[dgandhi]

Below API

https://documenter.getpostman.com/view/1797923/SzKN22aV#fa34935d-3eef-40f1-9b8e-6a2a49e15ef2

[rushikeshvartak]

Its not supported for Application Role Type

[plakhangaonkar]

Hi Devang,

This does not work for APPLICATION role type. 

[dgandhi]

What is the error and body that you passed?

[plakhangaonkar]

Hi Devang,

Thank you for your quick response. I was able to add entitlements to the role by first creating role (/createEnterpriseRoleRequest) and then updating role (/updateEnterpriseRoleRequest). During the update operation, I added entitlement details in JSON request.

I will now check if API to create entitlement based role request works (/createrequest). This way my use case can be done with 1 API call instead of 2 that I mentioned above.

Thanks,

Priya

[dgandhi]

Thanks, that means you are able to create Application role via API which was your original ask.

[plakhangaonkar]

MY original ask to this thread was Unable to create Entitlement based role request. I went via the route to first create app role and then update it because the direct API posted on Saviynt API documentation was not working (/createrequest). 

https://documenter.getpostman.com/view/1797923/2s83mbojGM#568384cd-9d5a-4570-bc38-5c93a9c62543