15.9 Downloading and Importing Technical Roles

You can download technical roles as a JSON file and import them later into another environment.

To download or import technical roles:

  1. Log in as a Global or Technical Roles Administrator.

  2. Under Catalog, select Roles.

  3. To download:

    • A list of technical roles with name, description, and state as a CSV file, select Actions > Download all as CSV in the Roles tab.

    • To download all technical role definitions, select Actions > Download Definitions.

    • To download one or more technical role definitions:

      • Select one or more roles on the Roles tab.

      • Type the technical role name or a meaningful description.

      • (Optional) Include references to technical role owners and download associated applications and assigned categories.

      • Click Download.

  4. Select the download icon on the top title bar to access the saved files and download the files.

  5. (Optional) Delete the file from the download area in Identity Governance.

    If you do not manually delete the file, Identity Governance will automatically delete the file based on your default download retention day settings. For information about customizing download settings, see Section 3.6, Customizing Download Settings.

  6. If you make changes, or want to import previously downloaded technical roles into another environment, select Import Technical Roles on the Roles tab.

  7. Navigate to the technical roles JSON file, select the file to import, and click Open.

    Identity Governance detects whether you are importing new or updated roles and whether the updates would create any conflicts or have unresolved references.

    Identity Governance adds an indicator to technical roles that cannot be resolved because a match for a referenced object was not found in the system. Importing before the roles are resolved will result in incomplete roles with some missing permissions. If an indicator is shown next to a role in the import view, inspect these roles and ensure they map properly in the target system.

  8. Select how to continue based on what information is displayed.

    NOTE:After importing, you must activate the role for Identity Governance to recognize the users that hold the permissions as members of a technical role. For more information, see Section 15.6, Activating Technical Roles.