Assigning ServicePrincipal
While providing the role id from policy, if you have configured a policy for specifying role id, then this role id is used for provisioning of all ServicePrincipals in a request. Therefore, you must provision one ServicePrincipal in one request.
While providing an access to a ServicePrincipal, it is mandatory to provide an access role for the user. These access roles may differ depending upon the ServicePrincipal type. SailPoint uses one of the access roles it receives for each ServicePrincipal during the aggregation of ServicePrincipals.
Note
The servicePrincipalRoleId attribute must be added in Update Account Policy while assigning ServicePrincipals from Request Access.