• State Suggested Answer
  • Replies replies
    5
  • Answers answer
    1
  • Subscribers subscribers
    15
  • Views views
    586
  • Users 0 members are here
  • Locked Locked
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IGA 3.6.2 / 3.7 --- What rest calls do I need to make to request the removal of a group or application from a user?

Fred Patterson

When an account is disabled / terminated in IDM we want to send a rest call to IG to remove specific applications / permissions from that user.

-get token

-/data/users to get user's unique ID  (not working yet)

-request/users/{User Unique ID}/perms  (working when submitting it based on data in IG catalog)

do we then do a /request/request ?

      -If so any examples of doing a removal?
      -What are the requestType values we can specify?
      -What do we specify for the recipient? The Source ID or unique ID value we retrieved earlier?

      -What doe we specify for the requestItem? The unique ID of the permission or application?

thanks!
Fred

Parents
  • 0  

    You can find the user by issuing a POST to /api/data/users/search containing a JSON body like this:

    {"criterias":["{\"operator\":\"AND\",\"childCriteria\":[{\"attributeKey\":\"dn\",\"operator\":\"EQ\",\"values\":[\"cn=SOMELDAPDN\"]}]}"]}

    In this example I'm searching by using the LDAP DN of the identity. You can do a search in the IG UI and watch the traffic using the browser developer tools if you want to use some other criteria to find out what the API expects.

    You'll get an array back and you get the user ID like this:

    users[0].userId

  • 0 in reply to Aleksandar Mujadin

    Thanks I will give that a shot.

    for the request/request we look to have  a working request --I will update here once we have it working

  • Suggested Answer

    0 in reply to Fred Patterson

    IG Rest calls to remove permission.

    Used a POST with the URL containing the below

    {{authURL}}    /api/data/users/search?sortBy=displayName&sortOrder=DESC&indexFrom=0&size=100&showCt=true&listAttr=displayName&listAttr=userId&qMatch=ANY&q=cn=LX1411,ou=CPO,o=CTT

    This worked great to grab the user based on their UserDN value for the given environment.



    Here is an example to request permissions on an account:

    {{authURL}}/api/request/users/{{userID}}/perms?getParams=true

    with body containing:
    {
    "requestItem": "true",

    }


    Here is an example of how to request the removal of a permission on an account using /api/request/request

    {
        "requestSource": "REQUEST",
        "requester": "6fd75ecd493b4f1b87b2f09a0447f3cc",
        "reason": "Disconnected App Removal on Account Dissablement",
        "requestItems": [
            {
                "requestItem": "a3e2f34c-a62f-3e6c-bd8b-b8c481cb7272",
                "reason": "Disconnected App Removal on Account Dissablement",
                "type": "PERMISSION",
                "recipient": "7ac6682a7bd543ee8e2fe75fb6b6b11f",
                "removal": true,
                "requestType": "REMOVE_PERMISSION_ASSIGNMENT"
            }
        ]
    }

     

    Reference <url>/apidoc against the ig server for docmuentation

    Swagger looks to be 1.2 and doesn't import into Postman with 3.7.0 version

Reply

  • Suggested Answer

    0 in reply to Fred Patterson

    IG Rest calls to remove permission.

    Used a POST with the URL containing the below

    {{authURL}}    /api/data/users/search?sortBy=displayName&sortOrder=DESC&indexFrom=0&size=100&showCt=true&listAttr=displayName&listAttr=userId&qMatch=ANY&q=cn=LX1411,ou=CPO,o=CTT

    This worked great to grab the user based on their UserDN value for the given environment.



    Here is an example to request permissions on an account:

    {{authURL}}/api/request/users/{{userID}}/perms?getParams=true

    with body containing:
    {
    "requestItem": "true",

    }


    Here is an example of how to request the removal of a permission on an account using /api/request/request

    {
        "requestSource": "REQUEST",
        "requester": "6fd75ecd493b4f1b87b2f09a0447f3cc",
        "reason": "Disconnected App Removal on Account Dissablement",
        "requestItems": [
            {
                "requestItem": "a3e2f34c-a62f-3e6c-bd8b-b8c481cb7272",
                "reason": "Disconnected App Removal on Account Dissablement",
                "type": "PERMISSION",
                "recipient": "7ac6682a7bd543ee8e2fe75fb6b6b11f",
                "removal": true,
                "requestType": "REMOVE_PERMISSION_ASSIGNMENT"
            }
        ]
    }

     

    Reference <url>/apidoc against the ig server for docmuentation

    Swagger looks to be 1.2 and doesn't import into Postman with 3.7.0 version

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.