Programming Guide › CSV File Import › Entity Files

Entity Files

Users Database File

The first row in the entity file must be a header row. Each subsequent row represents a single user, where the row contains the following fields:

• PersonID—the key, and must be unique
• UniqueID—should appear in the PersonID also, usually the login name
• UserName
• Organization
• Organization Type
• Endpoint Type—the type of application from which the data is coming from, for example, SAP

• Endpoint Name—the name of the application instance from which the data is coming from, for example, 'SAP-PROD'

• Field 1 to Field n (optional)

Note: The UniqueID, Endpoint Type, and Endpoint Name fields do not have to appear in the Users database file for the connector defined as "As Users". However, for flexibility reasons, we recommend including them. Any connector defined as "As Accounts" or "As Users and as Accounts" must include these three required fields.

Resources Database File

The first row in the entity file must be a header row. Each subsequent row represents a single resource and contains the following fields, where a combination of Resource Name 1, 2, and 3 is the key and is assumed to be unique:

• Resource Name 1—the friendly name of the endpoint object.
• Resource Name 2—composed of the endpoint type and endpoint name separated by the delimiter [EP], for example, ActiveDirectory[EP]ADSServer1
• Resource Name 3—composed of the object type and unique ID separated by the delimiter [P], for example, UNIX Group[P]serverAdmins
• Field 1 to Field n (optional)

Roles File

If you want to use custom role attributes, the first row in the entity file must be a header row. Otherwise, you can use the previous roles file format that did not require a header row.

The following system properties define how the file is treated:

csvImport.roles.forceHeader.enable

Defines if the first line in the file is read as a header row. If this property is set to true, the product reads the first line as a header row. If this property is set to false, the product automatically detects if the first row is a header row, based on the value of the following property.

Default: False

csvImport.roles.headerRow.key

Defines the field name to match to detect if the first line in the file is a header row when csvImport.roles.forceHeader.enable is set to false. When csvImport.roles.forceHeader.enable is set to true, this property is not used.

Default: rolename

The file has one row per role definition, each with the following fixed fields:

• RoleName - must be the unique ID
• Description
• Organization
• Owner
• Type—the object type, such as SAP Role
• Creation Date
• Reviewer
• Approval Status
• Approval Date
• Rule
• (Optional) Organization 2—composed of the endpoint type and endpoint name separated by the delimiter [EP], for example, ActiveDirectory[EP]ADSServer1. For a business role, this field is empty.
• Organization 3—Internal CA GovernanceMinder Use Only
• Expiration Date

For custom role attributes, add them to the roles file after the Expiration Date field.