Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

AD Group Import Ownership - tableFieldAttribute

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on October 13 2020 at 22:32 UTC

How does the tableFieldAttribute on the groupImportMapping work? The documentation says it is used to map the owner and the sample has it using the accountID attribute. What group ad attribute is it matching the accountID to?

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
2 REPLIES 2

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on October 14 2020 at 06:37 UTC

Hi Paul,


Greetings!!


Thanks for pointing this out.


I found a missing attribute in the JSON available in the document.

"entitlementOwnerAttribute":"managedBy"


The tableFieldAttribute is actually tied up to entitlementOwnerAttribute in the same JSON and it checks for the same DN which is available in managedBy attribute.

Once found in SSM, it inserts the User associated to that AccountID as an owner of that Group in SSM.

In case, there is no user to that account associated in SSM. It will keep that value blank in SSM.

Please find the updated JSON below, I will get it corrected in global documentation soon.


{"importGroupHierarchy" : "true",

"entitlementTypeName": "",

"importnestedmembershipoutofscope":"false","performGroupAccountLinking": "true","incrementalTimeField": "whenChanged","groupObjectClass": "(objectclass=group)","mapping":"memberHash:member_char,customProperty1:sAMAccountType_char,customProperty2:instanceType_char,customProperty3:uSNCreated_char,customProperty4:groupType_char,customProperty5:dSCorePropagationData_char,customProperty12:dn_char,customProperty13:cn_char,lastscandate:whenCreated_date,customProperty15:managedBy_char,entitlement_glossary:description_char,description:description_char,displayname:name_char,customProperty9:name_char,customProperty10:objectCategory_char,customProperty11:sAMAccountName_char,entitlement_value:distinguishedName_char,entitlementid:distinguishedName_char,customProperty14:objectClass_char,updatedate:whenChanged_date,customPropErty17:distinguishedName_char,RECONCILATION_FIELD:customPropeRty18,customProperty18:objectGUID_Binary,customProperty19:managedBy_char","entitlementOwnerAttribute":"managedBy","tableFieldAttribute":"accountID"}


Thanks & Regards,

Anand Kumar Jha

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on October 14 2020 at 20:37 UTC

That makes sense. Thanks!

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.