Values and formats for CSV access data (service)

A service access CSV file can contain multiple values and supported formats.

Consider these points before you work with any CSV files for a service access:

  • If you use a custom label for AccessType, specify the key in the CSV file.
  • If you use a custom label for badge text, add a $ prefix on the key. For example, $mail.
  • Define multiple values for search terms and badges with a semicolon (;) separator.
  • Define the AccessType hierarchy with a colon (:) separator.
  • Use the badgeText~badgeStyle format for badges.

Define CSV columns for a service, group, or a role access as follows:

Table 1. CSV fields and values. CSV fields and values
Field name Value
SERVICE_DN, SERVICE_NAME Not modifiable.
DEFINE_AS_ACCESS TRUE or FALSE. If you do not assign any value, then FALSE is assumed.
ACCESS_NAME Required for services and groups, and contains a maximum length of 240 characters. This field is not available for roles.
ACCESS_TYPE Required. You must specify an access type that is defined in IBM Verify Identity Governance.
ACCESS_DESCRIPTION Contains a maximum length of 240 characters.
ICON_URL Provide a valid icon URL value on the access definition.
SEARCH_TERMS Each search term contains a maximum length of 80 characters. You can have multiple search terms.
ADDITIONAL_INFORMATION Contains a maximum length of 1024 characters.
BADGES The maximum length for each badge text is 512 characters. You can have multiple badges. The badge text that is prefixed with a $ sign cannot contain delimiter characters such as ., ;, =, or white space.

A service access CSV file for an export or import operation in the IBM Verify Identity Governance administration console contains these columns with sample values and supported formats:

Table 2. Part 1 of 2: Service access CSV file values, formats
SERVICE_NAME DEFINE_AS_ACCESS ACCESS_NAME ACCESS TYPE ACCESS_DESCRIPTION ICON_URL
admin TRUE Access Application:Finance This access is for the admin service. /itim/ui/custom/ui/images/homepage/RequestAccess.png
AIX Service FALSE AIX Service Application:Finance:Payroll This access is for the AIX Service. http://www-03.ibm.com/ibm/history/exhibits/logo/images/920911.jpg
Default Service TRUE default access MailService This access is a default service access. http://www-03.ibm.com/ibm/history/exhibits/logo/images/920911.jpg
Table 3. Part 2 of 2: Service access CSV file values, formats
SERVICE_NAME SEARCH_TERMS ADDITIONAL_INFORMATION BADGES SERVICE_DN
admin Service Access; Manager Service that is used by a client user. admin~green erglobalid=5628670506891199803,ou=services,erglobalid=000000
AIX Service Employee;Service;AccessService Used by the customer to deploy server. $roleaccess~red erglobalid=5628669752130902869.ou=services,erglobalid=000000
Default Service Mail;Unique ID BVT server that is used to run BVT from developer and tester. $mail~green;Risky~red erglobalid=5628670337030215245,ou=services,erglobalid=000000