# Integrating SailPoint with Resource Guru

Resource Guru is a cloud-based resource scheduling and capacity management platform designed to help teams plan, allocate, and optimize people, equipment, and project workloads. It provides a centralized scheduling calendar, real-time availability tracking, utilization reporting, and role-based access controls, enabling organizations to prevent overbooking, improve visibility, and manage operational efficiency across departments. This document provides instructions to configure a new direct connection to a Resource Guru source. For a reference to the terminology specific to SailPoint products, refer to [Source and Connector Definitions](<https://documentation.sailpoint.com/saas/help/sources/index.html#source-and-connector-definitions>).

> [!NOTE]
>
> To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the [SaaS Release Notes](<https://community.sailpoint.com/release-notes/saas>) page.

## Supported Features

The Resource Guru connector supports the following:

### Account Management

- Aggregate Accounts (Users)

> [!IMPORTANT]
>
> Quick Compliance connectors have the following manual aggregation limits within a 24-hour period:
>
> - **Organization Admins**: Limited to 3 manual account or entitlement aggregations per day per source. This limit is cumulative across all admins in the organization.
> - **Regular Users**: Limited to 1 manual account or entitlement aggregation per day per source.
>
> These limits ensure that individual compliance statuses are kept up to date while maintaining continuous compliance monitoring. If you need to run additional aggregations beyond these limits, contact SailPoint Support.

## Prerequisites

- Resource Guru provides OAuth 2.0-based authentication for API access. For internal integrations and backend systems, you can use the Password Grant (Resource Owner Password Credentials) flow.
- This method allows your application to obtain an access token directly by using a valid Resource Guru username and password along with the application’s client credentials.

  > **Important**
  >
  > Before you use the Password Grant flow, you must create an OAuth application.

#### Create an OAuth application

To create an OAuth application:

1. Sign in to Resource Guru.
2. Go to **Developers \> API Applications**.
3. Select **Create New Application**.
4. Enter the following information:

   - **Application Name**: Enter a name for your application.
   - **Redirect URI**: Enter a redirect URI (for example, `http://localhost:8080 for testing`).
5. Select Confidential (uses `client_secret`).
6. Select Save.
7. Copy and save the following credentials:

   - Client ID
   - Client Secret
8. Copy your **Account ID** from the URL. For example, in `https://app.resourceguruapp.com/hi/demo_acc/dashboard`, the Account ID is `demo_acc`. You will need these credentials to generate tokens. For more information about obtaining an access token, refer [Resource Guru API documentation](<https://resourceguruapp.com/docs/api#section/Authentication>).

   > **Note**
   >
   > The linked document is not maintained by SailPoint and is subject to change without notice.

## Required Permissions

- User aggregation can be performed by using an account that is assigned to any of the following preset roles:

  - Basic User
  - Manager
  - Administrator
- However, the account must have **View** access to the **People &amp; Resources** section. This permission allows the connector to retrieve user details such as name, email, account status, and role-related attributes.
- For consistent API visibility, we recommend that you also enable **View** access to the **Schedule** section.

  > **Important**
  >
  > If People &amp; Resources access is set to No Access, the connector cannot retrieve user data.

#### Use a custom role (optional)

- Instead of using a preset role, you can create a custom role to follow the principle of least privilege.
- To create a custom role:

  1. Enable **View** permission for:

     - **People &amp; Resources**
     - **Schedule** (recommended)
  2. Set all other sections to View (recommended) or No Access unless additional access is required.
- This approach ensures that the integration has only the minimum access necessary for user aggregation.

  > **Important**
  >
  > - Edit permissions are not required for user aggregation.
  > - Administrator access is not required unless broader functionality is needed.
  > - API access always inherits the permissions of the authenticated user.
  > - If the integration user account is deactivated, API access is immediately revoked.
  > - Resource Guru does not provide a dedicated service account type. You must use a standard user account for integration purposes.

  > **Note**
  >
  > The following scenarios may cause integration issues: - If the password changes, the integration will break. - If multifactor authentication (MFA) is enabled, the integration may break. - If single sign-on (SSO) is enforced, the integration may not work.