Entitlement Validity Period

The user can be assigned a SAP Role with Start Date and an End Date. The ability to select or specify the same, while requesting an entitlement for an account, is available in Identity Security Cloud by creating a custom Provisioning Plan.

Following is the Sample attribute request when assignment dates are in Date format:

Copy
<AttributeRequest name="Roles" op="Add" value="SAP_AUDITOR_SA">
          <Attributes>
            <Map>
              <entry key="assignment" value="true"/>
              <entry key="startDate">
                <value>
                  <Date>1441195751000</Date>
                </value>
              </entry>
              <entry key="endDate">
                <value>
                  <Date>1441449381000</Date>
                </value>
              </entry>
            </Map>
          </Attributes>
        </AttributeRequest>
        <AttributeRequest name="Roles" op="Set" value="SAP_AUDITOR_SA">
          <Attributes>
            <Map>
              <entry key="assignment" value="true"/>
              <entry key="startDate">
                <value>
                  <Date>1441195751000</Date>
                </value>
              </entry>
              <entry key="endDate">
                <value>
                  <Date>1441449381000</Date>
                </value>
              </entry>
            </Map>
          </Attributes>
        </AttributeRequest>

Following is the Sample attribute request when assignment dates are in String format:

Copy
<AttributeRequest name="Roles" op="Add" value="SAP_BC_DB_ADMIN">
          <Attributes>
            <Map>
              <entry key="assignment" value="true"/>
              <entry key="startDate">
                <value>
                  <String>2014-1-1</String>
                </value>
              </entry>
              <entry key="endDate">
                <value>
                  <String>2015-2-2</String>
                </value>
              </entry>
            </Map>
          </Attributes>
        </AttributeRequest>
        <AttributeRequest name="Roles" op="Set" value="SAP_BC_DB_ADMIN">
          <Attributes>
            <Map>
              <entry key="assignment" value="true"/>
              <entry key="startDate">
                <value>
                  <String>2014-1-1</String>
                </value>
              </entry>
              <entry key="endDate">
                <value>
                  <String>2015-2-2</String>
                </value>
              </entry>
            </Map>
          </Attributes>
        </AttributeRequest>