def import_group(group, target_host, target_token๐
headers = get_headers(target_token)
url = f'{target_host}/api/2.0/preview/scim/v2/Groups'
group_check_url = f'{url}?filter=displayName eq "{group["displayName"]}"' # Check if group already exists by display name
response = make_request_with_error_handling(group_check_url, headers)
existing_groups = response.json().get('Resources', [])
if existing_groups:
existing_group = existing_groups[0]
logging.warning(f"Group {group['displayName']} already exists in target system. Checking members.")
existing_members = {member['value'] for member in existing_group.get('members', [])}
new_members = {member['value'] for member in group.get('members', [])}
missing_members = new_members - existing_members
if missing_members:
logging.info(f"Adding missing members to group {group['displayName']}.")
patch_data = {
"schemas": ["urn:ietf:params:scim:api:messages:2.0:PatchOp"],
"Operations": [
{
"op": "add",
"path": "members",
"value": [{"value": member} for member in missing_members]
}
]
}
update_url = f'{url}/{existing_group["id"]}'
make_request_with_error_handling(update_url, headers, method='PATCH', data=patch_data)
logging.info(f"Group {group['displayName']} updated with missing members.")
else:
logging.info(f"No missing members for group {group['displayName']}.")
return False
data = {
"schemas": group.get("schemas", []),
"displayName": group["displayName"],
"members": group.get("members", [])
}
try:
make_request_with_error_handling(url, headers, method='POST', data=data)
logging.info(f"Group {group['displayName']} imported successfully.")
return True
except KeyError as ke:
logging.error(f"KeyError importing group: {group}. Missing key: {ke}")
except requests.exceptions.HTTPError as err:
if err.response.status_code == 409:
logging.warning(f"Group {group['displayName']} already exists in target system. Skipping import.")
else:
logging.error(f"HTTP error occurred importing group: {group}. Error: {err}")
except Exception as e:
logging.error(f"Error importing group: {group}. Error: {e}")
return False
