Click HERE to see how Saviynt Intelligence is transforming the industry. |
07/29/2024 01:11 AM
Hi Team,
In Account Import XML for a DB connector, we have configured below fields as follows-
deleteaccountentitlement="true" accountnotinfileaction="Suspend"
and in STATUS_THRESHOLD_CONFIG, we have configured -
"deleteLinks": true,
Once the account is deleted and marked "Suspended from Import Service" after account import job, we are still seeing the entitlements tagged to the deleted account.
What should be done to remove those entitlements from the entitlement hierarchy/associated entitlements pages?
07/29/2024 01:21 AM
Hi @Gurukrishna96 , what is the behaviour after access import?
Share connector configuration
07/29/2024 01:56 AM
Hi @NM The behavior is same even after access import. There are no changes.
Account Import XML -
<mapper description="This is the mapping field for Saviynt Field name" ifusernotexists="noaction" addOnlyMode="false" deleteaccountentitlement="true" accountnotinfileaction="Suspend">
Status Threshold Config -
{
"statusAndThresholdConfig": {
"statusColumn": "status",
"activeStatus": ["1",1],
"deleteLinks": true,
"accountThresholdValue": 1000,
"correlateInactiveAccounts": false
}
}
Please let me know other details that are required from the connector configuration
07/29/2024 05:53 AM
Hi Gurukrishna
Can you run accounts import once and see its reflecting the changes on applicable accounts. Configuration wise it all looks good. Even my db connector works flowless with the same config.
You can try the below config, by changing the order. I know it does not make much sense, still you can give a try.(Removing addonlymode)
<mapper description="This is the mapping field for Saviynt Field name" accountnotinfileaction="Suspend" deleteaccountentitlement="true" ifusernotexists="noaction">
If it does not work , Please share logs.
f this helps, please consider selecting Accept As Solution and hit Kudos
Best,
Sangita Ladi
07/29/2024 05:56 AM
Can you run accounts import once and see its reflecting the changes on applicable accounts. Configuration wise it all looks good. Even my db connector works flowless with the same config.
You can try the below config, by changing the order. I know it does not make much sense, still you can give a try.(Removing addonlymode)
If it does not work , Please share logs.
if this helps, please consider selecting Accept As Solution and hit Kudos
Best,
Sangita Ladi
07/29/2024 07:38 AM
<mapper description="Database Accounts and Account to Entitlement Import" accountnotinfileaction="suspend" deleteaccountentitlement="true" dateformat="date" systems="'Application'">
Use above configuration for account Import xml