Skip to content

Account Update Operation

Description

The Account Update operation applies changes to a fusion account. Currently, it primarily supports entitlement-based actions (like "report", "fusion", "correlate") which are modeled as entitlement adds/removes in ISC.

Process Flow

  1. Input Validation:

    • Verifies that the identity (ID) and changes list are provided.
    • Loads sources and schema.

  2. Fusion Account Rebuild:

    • Rebuilds the fusion account to ensure we are operating on the latest persisted account state.
    • Configuration:
      • refreshMapping: False (does not recompute mapped values).
      • refreshDefinition: False (does not recompute definition values).
      • resetDefinition: False.

  3. Change Processing:

    • Iterates through the list of requested changes.
    • Checks if the change is for the actions attribute.
    • Action Execution:
      • Report: Generates a fusion report.
      • Fusion: Adds or removes the fusion tag.
      • Correlated: Manually triggers correlation logic.
    • Unsupported attributes or actions result in an error.

  4. Output Generation:

    • Returns the updated ISC account state.

Behavior Notes

  • No attribute refresh on update: The account is rebuilt with refreshMapping: false and refreshDefinition: false, preserving all existing attribute values including nativeIdentity and account name. The update operation only processes entitlement changes (actions), it does not regenerate attributes.