Role

The Salesforce SaaS connector supports the Salesforce Role object with bidirectional role hierarchy at one level.

New sources supports the role hierarchy by default.

Updating Existing Source Role Schemas to Support Role Hierarchy

Following are the steps to populate the role hierarchy in the entitlement details:

  1. If you have an existing source, update the existing Role schema with the following attributes to get support for the role hierarchies.

    Copy
    {
        "hierarchyAttribute": "ParentRoleId",
        "attributes": [
            {
                "name": "CaseAccessForAccountOwner",
                "type": "STRING",
                "schema": null,
                "description": "The case access level for the account owner",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "ContactAccessForAccountOwner",
                "type": "STRING",
                "schema": null,
                "description": "The contact access level for the account owner",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "OpportunityAccessForAccountOwner",
                "type": "STRING",
                "schema": null,
                "description": "The opportunity access level for the account owner",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "ParentRoleId",
                "type": "STRING",
                "schema": null,
                "description": "Unique identifier for role's parent role",
                "isMulti": true,
                "isEntitlement": false,
                "isGroup": false
            }
        ]
    }
  2. Utilize the REST API for Entitlement Aggregation and add disableOptimization=true in the payload to trigger full entitlement aggregation. For example,

    https://{tenant}.api.identitynow.com/beta/entitlements/aggregate/sources/:id?disableOptimization=true