Hello,

Yes, it is possible to update the dimensions of a role assignment using the “Edit a role assignment of an identity” API request.

A few important points to keep in mind:

Immutable fields (like id, role, roleVersion, and source) should not be modified. Changing them will cause errors.
Only update the fields that are intended to change, such as dimensions or optional dates.
Ensure that the status and certificationStatus remain consistent with your role management policies.

Here is an example of a request body to update the dimensions:

{\n  \"id\": \"08936a6c-380e-4772-82fc-3de16bf2bb1a\",\n  \"role\": \"KB0169\",\n  \"roleVersion\": 1,\n  \"status\": \"ASSIGNED\",\n  \"certificationStatus\": \"CERTIFIED\",\n  \"manualProvisioningStatus\": \"NOT_APPLICABLE\",\n  \"source\": \"MANUAL\",\n  \"parentAssignment\": null,\n  \"roleBinding\": null,\n  \"policy\": null,\n  \"policyMode\": null,\n  \"policySynchronized\": false,\n  \"policyVersion\": null,\n  \"enabledFrom\": null,\n  \"enabledUntil\": null,\n  \"dimensions\": {\n    \"CyberSpace\": false\n  }\n}

Explanation:

\"dimensions\": Add or update the key/value pairs representing the dimension/profile you want to assign.
\"enabledFrom\" / \"enabledUntil\": Optional fields to set time-bound role assignments.
Other fields generally should remain as-is, unless you have a specific reason to update them.

Once the request is sent with a valid id and correctly formatted body, the role assignment will reflect the new dimension/profile.

Kind regards,

Hassan

Changing the Dimension/Profile of an Existing Role via API