AD child endpoint entitlements are getting deactivated after daily import job

[nitishdas]

Hello Team,

Could you please help us on this. We are facing with an issue where AD child endpoint's entitlements are getting deactivated after the import job runs.

[NM]

Hi @nitishdas, I hope you have added the group name under endpoint filter for the child endpoint..

[nitishdas]

Hi @NM , yeah the group name is under the endpoint filter

[NM]

1) Was the entitlement imported or manually created?

2) is the entitlement still present on app end?

3) what is the state of entitlement in parent endpoint?

[nitishdas]

@NM ,

1. This issue occured suddenly from last one month.

2. The entitlement is still present in the app end

3. this we need to check

[nitishdas]

Hi @NM ,

There are no entitlement showing for the parent endpoint.

[rushikeshvartak]

Validate if entitlement have REFERENCED_ENTITLEMENT  of parent endpoint ent valuekey

select entitlement_value,REFERENCED_ENTITLEMENT from entitlement_values

[nitishdas]

Hi @rushikeshvartak , All the entitlement values has REFERENCED_ENTITLEMENT value

[CR]

can you confirm parent and child entitlement value check ?

[rushikeshvartak]

Please share groupImportMapping  

[nitishdas]

Hi @rushikeshvartak ,

{
"importGroupHierarchy": "true",
"entitlementTypeName": "",
"performGroupAccountLinking": "true",
"incrementalTimeField": "whenChanged",
"groupObjectClass": "(objectclass=group)",
"mapping":",customProperty11:sAMAccountName_char,memberHash:member_char,customProperty13:cn_char,lastscandate:whenCreated_date,entitlement_value:distinguishedName_char,entitlementID:objectGUID_Binary,customProperty18:objectGUID_Binary,updatedate:whenChanged_date,RECONCILATION_FIELD:customProperty18"
}

[rushikeshvartak]

{
"importGroupHierarchy": "true",
"entitlementTypeName": "memberOf",
"performGroupAccountLinking": "true",
"incrementalTimeField": "whenChanged",
"groupObjectClass": "(objectclass=group)",
"mapping":",customProperty11:sAMAccountName_char,memberHash:member_char,customProperty13:cn_char,lastscandate:whenCreated_date,entitlement_value:distinguishedName_char,entitlementID:objectGUID_Binary,customProperty18:objectGUID_Binary,updatedate:whenChanged_date,RECONCILATION_FIELD:customProperty18"
}

[nitishdas]

Hi @rushikeshvartak , but one thing here there were no changes made to this entitlementtypename. This was kept blank from very long but suddenly this issue occured in Feb.

[rushikeshvartak]

Any patch or upgrade happened ?

[nitishdas]

Hi @rushikeshvartak , as far my knowledge there were no information from Saviynt about any patch or upgrade.

[rushikeshvartak]

Update and validate above configuration

[Manu269]

@nitishdas for groupImportMapping  is there any change importGroupHierarchy?

[nitishdas]

Hi @Manu269 , there were no changes made 

[nitishdas]

Hi @Manu269 , There wasn't any change made to importgrouphierarchy. It is set as True