Group Aggregation Configuration

The SAP HANA source in Identity Security Cloud supports the following group and entitlement objects:

For the SAP HANA source, only the Repository Roles and Catalog Roles are aggregated after entitlement aggregation. Other supported entitlement types display as Role IDs instead of their display names after the account aggregation.

Note
Some sources may not include Catalog Roles as group entitlements. To support Catalog Roles, you must add the CATALOG_ROLES schema as a group schema.

The following is an example of the JSON payload:

Copy 
{       
        "nativeObjectType": "CATALOG_ROLE",
        "identityAttribute": "ROLE_ID",
        "displayAttribute": "ROLE_NAME",
        "hierarchyAttribute": null,
        "includePermissions": false,
        "features": [],
        "configuration": {},
        "attributes": [
            {
                "name": "ROLE_NAME",
                "type": "STRING",
                "schema": null,
                "description": "Role name",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "ROLE_ID",
                "type": "STRING",
                "schema": null,
                "description": "Role ID",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "ROLE_MODE",
                "type": "STRING",
                "schema": null,
                "description": "Mode of the role: 'LOCAL' ",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "GLOBAL_IDENTITY",
                "type": "STRING",
                "schema": null,
                "description": "Identity specified for role with ROLE_MODE GLOBAL ",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "CREATOR",
                "type": "STRING",
                "schema": null,
                "description": "Name of the user who created the role ",
                "isMulti": false,
                "isEntitlement": false,
                "isGroup": false
            },
            {
                "name": "GRANTED_ROLES",
                "type": "STRING",
                "schema": null,
                "description": "The roles which are assigned to the current role ",
                "isMulti": true,
                "isEntitlement": false,
                "isGroup": false
            }
        ],
        "name": "catalog_roles",
        "modified": null
}