How to Handle Mass Role "assign site" in workzone

[woongkipark]

I’m currently provisioning PFCG roles from ERP to BTP IAS and automating role federation through Work Zone content packages.

However, the issue lies in Work Zone itself—it’s not enough to simply provision roles. Each role must be manually assigned to a site using the "ASSIGN SITE" button.

Given that there are over 1,000 roles, manually assigning them via the UI is incredibly challenging, especially since there’s no search functionality for unassigned roles!

Is there any way to automate role assignments, or at least make this process easier? Any suggestions or solutions would be greatly appreciated!

Best Regards 

[woongkipark · Accepted solution]

wow, this is planed feature

[WouterLemaire]

You could try to do this using the api’s in the meanwhile. I once made a script to create and assign user groups to role collections based on an excel but assigning the roles to the site was already done.

The excel was an export of the single roles exposed to workzone mapped to the composite role. So in the end we had a ias/cis user group for each composite role. Both were connected in idm.

[woongkipark]

I couldn’t find a separate API specifically for assigning sites. While I did see a role-assignment request triggered from the frontend application through the browser’s developer console (F12), it doesn’t appear to be a standard API. Therefore, since no standard API endpoint is provided, it seems risky to rely on that method for creating an automated assignment script.

[Juliuspereira]

Hi woongkipark,

Have you enabled this in the content channels?

I think if this is done, you do not need the assignement of roles to site because with this option the roles will not even get created in BTP. 

Julius

[woongkipark]

Yes, we are already using that feature. Even though no role is created in Cloud Foundry, we still need to "assign site."