Creating a role that will automatically update

[Hansen]

Hi,

I'm trying to create a role, that will automatically scan ENTRA ID for groups and add all new groups with the name xxx_yyy_(something) to the role.

The idea is to make the role requestable.

What is the correct way to do this?

[rushikeshvartak]

Please elaborate requirements 

[Hansen]

As a software developer we create a lot of different environments for our solution (3-4 per customer) these environments are controlled by Entra ID groups.

I would like one Saviynt role that would contain all the "Demo" environments. All our presales people would then get access to the role.

We might create several in a day, so to add all the Entra ID groups manually to the role would be nearly impossible.

All the Entra ID groups follows a specific naming standard like EMEA_Demo_customername. 

I would use the "EMEA_Demo" as an identifier and every time a new ENTRA ID group with this name is created (and synched to Saviynt) it should automatically be added to the saviynt role and when an ENTRA ID group is deleted it should be removed.

[rushikeshvartak · Accepted solution]

• You need to use custom jar and use saviynt API to map.
• OOTB its not supported Please raise idea ticket

[Hansen]

The idea is created

[rushikeshvartak]

Reference https://ideas.saviynt.com/ideas/EIC-I-6165