Click HERE to see how Saviynt Intelligence is transforming the industry. |
06/28/2023 09:41 AM
Hi,
In AD based on ENDPOINTS_FILTER we can take entitlements from parent endpoint to the child endpoints. But there we need to mention the entitlements like,
{
"A_AD": [
{
"memberOf": [
"CN=Finanace_A_AD_DESIGNER,OU=Groups,OU=Administration,DC=Company,DC=com",
"CN=Sales_A_AD_APP_ADMIN,OU=Groups,OU=Administration,DC=Company,DC=com"
]
}}
Suppose there are 100 entitlements in the parent endpoint and through ENDPOINTS_FILTER 25 entitlements are taken to Child Endpoint 1 & 25 entitlements are taken to Child Endpoint 2 respectively. Now, is there any configuration possible where the remaining entitlements directly requestable to the Child Endpoint 3 ?
Regards,
Indranil
06/28/2023 10:03 AM
If you are looking for an option to have rest of the 50 entitlements be mapped to a 3rd endpoint without any mapping defined in endpoint filter, then that is not available.
06/28/2023 11:13 AM
No, you will have to configure all the child endpoints in your connector configuration.
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.
06/28/2023 03:46 PM
Endpoint filter works on inclusion. Whatever specified will be created. System will not assume