Azure Role Assignment

Add the following attributes to your schema using the Create New Schema Identity Security Cloud REST API.

Note
For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.

Display name.

Azure Role Assignment ID.

Display name of the resource on which role can be assigned.

Display name of the role which can be assigned on resource.

Example schema:

Copy 
{
  "name": "azureRoleAssignment",
  "nativeObjectType": "azureRoleAssignment",
  "identityAttribute": "id",
  "displayAttribute": "displayName",
  "attributes": [
    {
      "name": "id",
      "type": "STRING",
      "schema": null,
      "description": "Azure Role Assignment ID",
      "isMulti": false,
      "isEntitlement": false,
      "isGroup": false
    },
    {
      "name": "displayName",
      "type": "STRING",
      "schema": null,
      "description": "Display name",
      "isMulti": false,
      "isEntitlement": false,
      "isGroup": false
    },
    {
      "name": "resource",
      "type": "STRING",
      "schema": null,
      "description": "Display name of the resource on which role can be assigned",
      "isMulti": false,
      "isEntitlement": false,
      "isGroup": false
    },
    {
      "name": "roleName",
      "type": "STRING",
      "schema": null,
      "description": "Display name of the role which can be assigned on resource",
      "isMulti": false,
      "isEntitlement": false,
      "isGroup": false
    }
  ]
}

The following is the corresponding sample entry of this entitlement in the account schema (if needed):

Copy 
[
  {
    "op": "add",
    "path": "/attributes/-",
    "value": {
      "name": "azureRoleAssignments",
      "type": "STRING",
      "schema": {
        "type": "CONNECTOR_SCHEMA",
        "id": "azure-role-assignment-schema-id",
        "name": "azureRoleAssignment"
      },
      "description": "azureRoleAssignments",
      "isMulti": true,
      "isEntitlement": true,
      "isGroup": true
    }
  }
]