Skip to content

Commit 79ce300

Browse files
Automated build 'Automated commit 'added better messaging for max entitlement restriction (#2168)
* added better messaging for max entitlement restriction * removed redundant wording for max entitlements' by github action: 15934809929' python sdk: 15934839385
1 parent f154f06 commit 79ce300

File tree

16 files changed

+42
-286
lines changed

16 files changed

+42
-286
lines changed

sailpoint/beta/api/access_requests_api.py

Lines changed: 3 additions & 3 deletions
Large diffs are not rendered by default.

sailpoint/beta/docs/Examples/python_code_examples_overlay.yaml

Lines changed: 0 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -718,39 +718,6 @@
718718
"type" : "ACCESS_PROFILE",
719719
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
720720
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
721-
}, {
722-
"clientMetadata" : {
723-
"requestedAppName" : "test-app",
724-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
725-
},
726-
"removeDate" : "2020-07-11T21:23:15Z",
727-
"comment" : "Requesting access profile for John Doe",
728-
"id" : "2c9180835d2e5168015d32f890ca1581",
729-
"type" : "ACCESS_PROFILE",
730-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
731-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
732-
}, {
733-
"clientMetadata" : {
734-
"requestedAppName" : "test-app",
735-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
736-
},
737-
"removeDate" : "2020-07-11T21:23:15Z",
738-
"comment" : "Requesting access profile for John Doe",
739-
"id" : "2c9180835d2e5168015d32f890ca1581",
740-
"type" : "ACCESS_PROFILE",
741-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
742-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
743-
}, {
744-
"clientMetadata" : {
745-
"requestedAppName" : "test-app",
746-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
747-
},
748-
"removeDate" : "2020-07-11T21:23:15Z",
749-
"comment" : "Requesting access profile for John Doe",
750-
"id" : "2c9180835d2e5168015d32f890ca1581",
751-
"type" : "ACCESS_PROFILE",
752-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
753-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
754721
} ],
755722
"requestedForWithRequestedItems" : [ {
756723
"identityId" : "cb89bc2f1ee6445fbea12224c526ba3a",

sailpoint/beta/docs/Methods/AccessRequestsApi.md

Lines changed: 7 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -203,9 +203,14 @@ __GRANT_ACCESS__
203203
* Roles, access profiles and entitlements can be requested.
204204
* You can specify a `removeDate` to set or alter a sunset date-time on an assignment. The removeDate must be a future date-time, in the UTC timezone. Additionally, if the user already has the access assigned with a sunset date, you can also submit a request without a `removeDate` to request removal of the sunset date and time.
205205
* If a `removeDate` is specified, then the requested role, access profile, or entitlement will be removed on that date and time.
206-
* While requesting entitlements, maximum of 25 entitlements and 10 recipients are allowed in a request.
207206
* Now supports an alternate field 'requestedForWithRequestedItems' for users to specify account selections while requesting items where they have more than one account on the source.
208-
207+
208+
:::caution
209+
210+
If any entitlements are being requested, then the maximum number of entitlements that can be requested is 25, and the maximum number of identities that can be requested for is 10. If you exceed these limits, the request will fail with a 400 error. If you are not requesting any entitlements, then there are no limits.
211+
212+
:::
213+
209214
__REVOKE_ACCESS__
210215
* Can only be requested for a single identity at a time.
211216
* You cannot use an access request to revoke access from an identity if that access has been granted by role membership or by birthright provisioning.
@@ -285,39 +290,6 @@ with ApiClient(configuration) as api_client:
285290
"type" : "ACCESS_PROFILE",
286291
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
287292
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
288-
}, {
289-
"clientMetadata" : {
290-
"requestedAppName" : "test-app",
291-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
292-
},
293-
"removeDate" : "2020-07-11T21:23:15Z",
294-
"comment" : "Requesting access profile for John Doe",
295-
"id" : "2c9180835d2e5168015d32f890ca1581",
296-
"type" : "ACCESS_PROFILE",
297-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
298-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
299-
}, {
300-
"clientMetadata" : {
301-
"requestedAppName" : "test-app",
302-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
303-
},
304-
"removeDate" : "2020-07-11T21:23:15Z",
305-
"comment" : "Requesting access profile for John Doe",
306-
"id" : "2c9180835d2e5168015d32f890ca1581",
307-
"type" : "ACCESS_PROFILE",
308-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
309-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
310-
}, {
311-
"clientMetadata" : {
312-
"requestedAppName" : "test-app",
313-
"requestedAppId" : "2c91808f7892918f0178b78da4a305a1"
314-
},
315-
"removeDate" : "2020-07-11T21:23:15Z",
316-
"comment" : "Requesting access profile for John Doe",
317-
"id" : "2c9180835d2e5168015d32f890ca1581",
318-
"type" : "ACCESS_PROFILE",
319-
"assignmentId" : "ee48a191c00d49bf9264eb0a4fc3a9fc",
320-
"nativeIdentity" : "CN=User db3377de14bf,OU=YOURCONTAINER, DC=YOURDOMAIN"
321293
} ],
322294
"requestedForWithRequestedItems" : [ {
323295
"identityId" : "cb89bc2f1ee6445fbea12224c526ba3a",

sailpoint/beta/models/access_request.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ class AccessRequest(BaseModel):
3333
""" # noqa: E501
3434
requested_for: List[StrictStr] = Field(description="A list of Identity IDs for whom the Access is requested. If it's a Revoke request, there can only be one Identity ID.", alias="requestedFor")
3535
request_type: Optional[AccessRequestType] = Field(default=None, alias="requestType")
36-
requested_items: Annotated[List[AccessRequestItem], Field(min_length=1, max_length=25)] = Field(alias="requestedItems")
36+
requested_items: Annotated[List[AccessRequestItem], Field(min_length=1)] = Field(alias="requestedItems")
3737
client_metadata: Optional[Dict[str, StrictStr]] = Field(default=None, description="Arbitrary key-value pairs. They will never be processed by the IdentityNow system but will be returned on associated APIs such as /account-activities.", alias="clientMetadata")
3838
requested_for_with_requested_items: Optional[List[RequestedForDtoRef]] = Field(default=None, description="Additional submit data structure with requestedFor containing requestedItems allowing distinction for each request item and Identity. * Can only be used when 'requestedFor' and 'requestedItems' are not separately provided * Adds ability to specify which account the user wants the access on, in case they have multiple accounts on a source * Allows the ability to request items with different remove dates * Also allows different combinations of request items and identities in the same request * Only for use in GRANT_ACCESS type requests ", alias="requestedForWithRequestedItems")
3939
__properties: ClassVar[List[str]] = ["requestedFor", "requestType", "requestedItems", "clientMetadata", "requestedForWithRequestedItems"]

0 commit comments

Comments
 (0)