Good morning!
I am trying to use Web Services to add a role to VIA, which should be a matter of importing an XML file.
I can MANUALLY import an XML role file under Roles. I know the file I am trying to import works. I see an option under Web Services for importMetadata, but nothing for importing roles. I tried the importMetadata option to import a role, and it doesn't see to work. Does anyone know of an option to import a role from an XML file using Web Services?
Thank you!
Marc
From the help section:
You would typically export and import roles in the following scenarios:
- You want to develop roles on an RSA Identity Governance and Lifecycle staging system, export the roles to an XML file, and then import the roles into a production system.
- You want to define roles with Role Manager, export the definitions to an external role authority, and then collect the roles on an ongoing basis to determine whether they meet quality and security standards.
The importMetaData service is not designed for importing roles. It mimics the UI functionality of importing configuration other than roles (i.e attributes, collectors and etc..)
Consider using a role collector to create a new role in the system.
Can you describe your use case in more detail?
Hi Boris, thank you for your reply!
There is some additional logic we wanted to apply when creating a role, so I wrote a role mining tool that was able to go into active directory and apply rules differently than VIA's rules. From the this tool that I wrote, I can generate an XML role file that is importable if I go in through Roles > Actions > Import Roles. The manual import works great. What I'd hoped to do to make it a little more seamless is directly push the newly created role into VIA using a Web Services call, but there doesn't seem to be a call that exists for this. I was hoping that there was an undocumented Web Services call that could handle this, or that a metadata import of some kind could facilitate this, but I haven't been able to find anything.
Thanks again!
Marc
Not familiar with such option.
I suggest you consider to re write your custom code and instead of generating a XML file, write to a staging DB and then use the role collector to collect it to RSA G&L (Via).
The answer is probably not the one you wanted to hear, but I think the role collector is a better approach because:
My 2 cents
Not familiar with such option.
I suggest you consider to re write your custom code and instead of generating a XML file, write to a staging DB and then use the role collector to collect it to RSA G&L (Via).
The answer is probably not the one you wanted to hear, but I think the role collector is a better approach because:
My 2 cents