Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

SAV4SAV Account and Entitlements association failure

SudheerKaneti
Regular Contributor
Regular Contributor

Hi Team,

We are using the below " ImportAccountEntJSON " in sav4sav connector. We are facing an issue that whenever we run access import job,  the sav roles and user groups are associating with accounts but most of the accounts are failed to mapped with sav roles and user groups. I have increased the batch size as well but no result. All the user groups and sav roles were imported as entitlements in saviynt but association with most of the accounts are failing.

 

============================================================================

{
"acctEntParams": {
"entTypes": {


"SAVRoles": {
"call": {
"call1": {
"acctKeyField": "accountID",
"callOrder": 0,
"processingType": "httpEntToAcct",
"pagination": {
"offset": {
"totalCountPath": 999999999,
"batchParam": "limit",
"batchSize": 90000,
"offsetParam": "offset"
}
},
"listField": "users",
"http": {
"httpContentType": "application/json",
"httpHeaders": {
"Authorization": "${access_token}"
},
"httpMethod": "GET",
"url": "https://******/ECMv6/api/userms/savroles/${id}/users"
},
"entKeyField": "entitlementID",
"acctIdPath": "username",
"connection": "userAuth",
"stageNumber": 1
}
}
},
"UserGroups": {
"call": {
"call1": {
"callOrder": 0,
"processingType": "entToAcctMapping",
"stageNumber": 0
}
}
}
}
},
"entitlementParams": {
"entTypes": {

"SAVRoles": {
"call": {
"call1": {
"keyField": "entitlementID",
"callOrder": 0,
"listField": "savroles",
"http": {
"successResponses": {
"statusCode": [
200,
201
]
},
"httpContentType": "application/json",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpMethod": "GET",
"url": "https://******/ECMv6/api/userms/savroles"
},
"stageNumber": 0,
"colsToPropsMap": {
"customproperty1": "CUSTOMPROPERTY1~#~char",
"entitlementID": "ROLENAME~#~char",
"entitlement_value": "ROLENAME~#~char"
}
}
},
"entTypeOrder": 0
},
"UserGroups": {
"call": {
"call1": {
"keyField": "entitlementID",
"callOrder": 0,
"pagination": {
"offset": {
"totalCountPath": "completeResponseMap.totalcount",
"batchParam": "max",
"batchSize": 90000,
"offsetParam": "offset"
}
},
"listField": "usergroups",
"http": {
"httpParams": "",
"httpContentType": "application/json",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpMethod": "POST",
"url": "https://******/ECM/api/v5/fetchUserGroup"
},
"stageNumber": 0,
"colsToPropsMap": {
"acctEntMappingInfoColumnFromEnt": "STORE#ACC#ENT#MAPPINGINFO~#~char",
"entitlementID": "usergroupkey~#~char",
"entitlement_value": "user_groupname~#~char"
}
}
},
"acctEntMappings": {
"keyField": "accountID",
"idPath": "username",
"listField": "owners",
"importAsAccount": false
},
"entTypeOrder": 2
}
},
"processingType": "SequentialAndIterative",
"connection": "userAuth"
},
"accountParams": {
"call": {
"call1": {
"keyField": "accountID",
"callOrder": 0,
"pagination": {
"offset": {
"totalCountPath": 999999999,
"batchParam": "max",
"batchSize": 50000,
"offsetParam": "offset"
}
},
"listField": "results",
"http": {
"httpContentType": "application/json",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpMethod": "GET",
"url": "https://******/ECM/api/v5/user?q=accountExpired:0&fields=username,email,displayname,statuskey&sort=username&order=desc"
},
"stageNumber": 0,
"colsToPropsMap": {
"accountID": "username~#~char",
"customproperty2": "email~#~char",
"customproperty11": "statuskey~#~char",
"displayName": "displayname~#~char",
"name": "username~#~char",
"status": "active~#~char"
}
}
},
"processingType": "SequentialAndIterative",
"connection": "userAuth",
"statusAndThresholdConfig": {
"inactivateAccountsNotInFile": true,
"activeStatus": [
1
],
"deleteAccEntForActiveAccounts": true,
"statusColumn": "customproperty11",
"accountThresholdValue":90000,
"correlateInactiveAccounts": false,
"deleteLinks": true
}
}
}

==============================================================

Please let us know if we can modify anything in the above json.

Thank you.

Sudheer Kaneti.

1 REPLY 1

rushikeshvartak
All-Star
All-Star

USE JSON from below post

https://forums.saviynt.com/t5/identity-governance/sav4savrest-accounts-import-always-returns-active-... 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.