RapidIdentity Product Guide

Delete Role Action

If enabled, the RapidIdentity Portal system will invoke the specified Action Set on the configured RapidIdentity Connect instance every time a Role is deleted. The Action Set is not meant to replace the built-in Role delete logic but to extend it.

Action Set Parameters
Table 327. Parameters

Parameter

Description

group_dn

The DN of the deleted Role

perp_dn

The DN of the perpetrator of the operation (who's performing the operation). This value may be 'null' if the Role was created as part of the import process.

audit_event_id

An audit event ID which may be used to correlate any audit log events from invoked Action Set to the audit log event generated by the call to the RapidIdentity Portal API

record_string

A JSON object containing information about the group before it was deleted. The fields include name, description, type, ownerDNs and coOwnerDNs in addition to any/all custom attributes/values.



Action Set Parameters

{ "name": "Super Cool Role", "description": "The description goes here", "type": "SECURITY_GROUP", "ownerDNs": [ "CN=owner1,ou=people,dc=example,dc=com", "CN=owner2,ou=people,dc=example,dc=com", ], "coOwnerDNs": [ "CN=co_owner1,ou=people,dc=example,dc=com", "CN=co_owner2,ou=people,dc=example,dc=com", ] }

Action Set Return Value

RapidIdentity Portal disregards any return value