Active Directory Group management workflow.

[Gopi]

Hi team,

When I try to delete or update any group from ARS using Manage Groups it's not going to approval. The Update Entitlement and Delete Entitlement pending tasks are created automatically. Is it expected behavior or is there any way we can handle this in our workflow which I added at the Entitlement Type level?

Regards,

Gopi.

[pmahalle]

Hi @Gopi ,

When AD group created through AD group management in Saviynt, it will create AD group and even add entitlement under endpoint but in the backend Saviynt manage it as Role.

So in order to update or delete those group considered as role modification or deletion so make sure to add same workflow which is present in your entitlement type in Role Modification Workflow and Role Removal Workflow in Global Configuration --> Roles and try once.

[Gopi]

Hi @pmahalle ,

I tried as per your suggestion. It worked for Role Removal i.e. approval request created but not for Role Medication. Both are the same workflow.

Regards,

Gopi

[rushikeshvartak]

Does request is created ?

[Gopi]

@rushikeshvartak 

No Request is not created.

Regards,

Gopi.

[rushikeshvartak]

Please share logs. On entitlement type we just have add access workflow hence it may not be supported 

[pmahalle]

Hi @Gopi ,

What are the steps you are following to update the groups? Also, are you using OOTB workflow for modification and removal of role under global configurations?