Roles - Import of data from CSV

Please use this tutorial to do so!

Here is an example of CSV file which can be used for importing (or updating) roles, setting their role attributes, guarantees (by user, or by role) and criticality. To use this CSV file, create a new identity with user name "user_login", and a new role with code "role_code".

roles;description;attribute;criticality;guarantee;guarantee role;
Manager-A;Leader;
LAY-SP;Manager;attr1;3;user_login;role_code
"CORE-CLOSE
AB-role";desc;attr1

As you can see roles column can contain single or multiple values (separated by a line; the separator can be specified in the settings of the LRT). For multivalued roles, values from the same row will be added to every role. The only exception here is role criticality which cannot be multivalued. CSV file can have optional number of columns: column names are specified in setup of LRT.

The result of this LRT used with this CSV file should:

• 4 new roles (Manager-A, LAY-SP, CORE-CLOSE, AB-role)
• Manager-A will only have a description set (Leader)
• LAY-SP will have a description (Manager), attribute (attr1), criticality (3), guarantee by identity (with user-name "user-login"), and guarantee by role (with role-code "role_code) set.
• Roles CORE-CLOSE and AB-role will have a description ("desc"), and attribute (attr1) set.

Now we will create the new LongRunningTask (LRT). As shown in the picture, go to Settings → Task scheduler → Scheduled tasks and hit green "Add" button to add new LRT.

Now we need to create new LRT with these attributes:

- Task type - ImportRolesFromCSVExecutor - Import csv file - dropzone to select or drop csv file - Column with roles - Name of the column with roles in csv file - Column with description - name of the column with role description, can be also used to update description (if your CSV file doesn't contain descriptions, i.e., you are not setting description for any of your roles, leave this line empty) - Column with attributes - name of the column with role attributes, can be also used to update attributes (if your CSV file doesn't contain attributes, i.e., you are not setting attributes for any of your roles, leave this line empty) - Column with criticality - name of the column with role criticality, can be also used to update criticality (if your CSV file doesn't contain criticality, i.e., you are not setting criticality for any of your roles, leave this line empty) - Column with guarantee - name of the column with role guarantee by identity login, can be also used to update guarantee (if your CSV file doesn't contain guarantees, i.e., you are not setting guarantees for any of your roles, leave this line empty) - Column with guarantee role - name of the column with role guarantee by role code, can be also used to update role guarantee (if your CSV file doesn't contain role guarantees, i.e., you are not setting role guarantees for any of your roles, leave this line empty) - Form definition code - the code for the definition which will contain the added attributes - Column separator - separator of columns in csv file (default ; ) - Multi value separator - (Char, default: new line) separator of multi valued role names in the csv file, new line separator is default export from excel, but for better clarity of the csv file, it's recommended to use some symbol instead - System name - name of the system to connect with roles - MemberOf attribute name - (default: rights) - name of multi valued attribute for merge, attribute named "rights" is automatically created on every virtual system, but you can create your own and change setup of LRT - Can be requested - (Boolean) - Fills can be requested, can be also used to update already imported settings

Now we just need to hit run.

You can check the status of the created roles in the "all tasks" panel in the task detail. Here you can find information about roles created, updated, or already existing.

At this point, everything should be set up and when the task ends, roles are imported in IdM with their attributes, placed in the catalogue named by the system name.

If you delete or upload new file via dropzone, you should delete old files, created from previous uploads.