You can download business roles, approval policies, and other referenced objects, and import them later into an Identity Governance environment. The download will either generate a single JSON file or a zip file depending on the options you select during download, such as associated applications and assigned categories. In addition to downloading the business role or approval policy definitions, you can download the list of objects as a CSV file.
While importing a business role, if that role references a technical role that is deactivated, then Identity Governance displays a warning. You can choose to activate the technical role and import, or continue with the import without activating it. If you select the latter, Identity Governance ignores the reference to the inactive role but allows you to activate the role later and include it in the policy.
Note that if a technical role references a business role, then Identity Governance will not allow you to delete or deactivate the technical role unless the technical role is removed by the business role administrator, from the list of all policies that reference this technical role and prevents deactivation.
To download or import business roles and business role definitions:
Log in to Identity Governance as a Customer, Global, or Business Roles Administrator.
Select Policy > Business Roles.
To download:
A list of business roles with description, owners, and managers as a CSV file, select Actions > Download all as CSV on the Roles tab.
To download all business role definitions, select Actions > Download Definitions.
To download one or more business role definitions, select Actions > Download Definitions.
Select one or more roles on the Roles tab.
Enter the business role name or a meaningful description.
(Optional) Include references to business role owners, managers, and fulfillers; and download included business roles, associated applications, technical roles, and assigned categories and approval policies.
Click Download.
Select the download icon on the top title bar to access the saved files and download the files.
(Optional) Delete the file from the download area in Identity Governance.
If you do not manually delete files, Identity Governance will automatically delete files based on your default download retention day settings. For information about customizing download settings, see Section 4.10, Customizing Download Settings.
If you make changes or want to import previously downloaded business roles into another environment, select Import Business Roles on the Roles tab.
Navigate to the business roles JSON or zip file, select the file to import, then click Open.
Identity Governance detects whether you are importing new or updated roles and whether the updates would create any conflicts or have unresolved references.
Select how to continue based on what information the application user interface displays. For example, under Updates, you can compare the imported values with current values for each role by selecting the respective role before selecting the roles to import.
Select the roles you want to import, then click Import.
NOTE:Identity Governance does not automatically publish imported business roles. You must publish them in order for them to take effect in the system. For more information, see Publishing or Deactivating Business Roles.
(Conditional) If you import more than the preconfigured threshold for the number of roles that can be displayed on the import page, Identity Governance will switch to bulk import mode. When in bulk mode, instead of selecting whether to create, update, or handle conflicts for specific roles, you can select to import all new roles and update all existing roles. For conflicts, you can choose to either overwrite existing roles or create new roles.
NOTE:The default value for roles that can be displayed is 200 or the value specified in the com.netiq.iac.importExport.maxImportsToDisplay property.
(Optional) Download the auto-generated import report from the download area. The import report will identify what was imported as well as call out any unresolved references.
To download or import business role approval policies:
Log in to Identity Governance as a Customer, Global, or Business Roles Administrator.
Select Policy > Business Roles.
Select a policy or all the policies on the Approval Policies tab.
Select Actions > Download Definitions.
Enter the approval policy name or a meaningful description.
(Optional) Include references to the approval policy approver.
Select Download.
Select the download icon on the top title bar to access the saved file and download the file.
(Optional) Delete the file from the download area in Identity Governance.
If you do not manually delete files, Identity Governance will automatically delete files based on your default download retention day settings. For information about customizing download settings, see Section 4.10, Customizing Download Settings.
If you make changes, or want to want to import previously downloaded approval policies into another environment, select Import Approval Policies on the Approval Policies tab.
Navigate to the approval policy JSON or zip file, select the file to import, then click Open.
Identity Governance detects whether you are importing new or updated policies and whether the updates would create any conflicts or have unresolved references.
Select how to continue based on what information the application user interface displays. For example, under Updates, you can compare the imported values with current values for each entity by selecting the respective policy before selecting the policies to import.
Select the policies you want to import, then click Import.
(Conditional) If you import more than the preconfigured threshold for the number of policies that can be displayed in the import page, Identity Governance will switch to bulk import mode. When in bulk mode, instead of selecting whether to create, update, or handle conflicts for specific policies, you can select to import all new policies and update all existing policies. For conflicts, you can choose to either overwrite existing policies or create new policies.
NOTE:The default value for policies that can be displayed is 200 or the value specified in com.netiq.iac.importExport.maxImportsToDisplay property.
(Optional) Download the auto-generated import report from the download area. The import report will identify what was imported as well as call out any unresolved references.