Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

AD ENDPOINTS_FILTER related question

indrahema95
Regular Contributor
Regular Contributor

Hi,

In AD based on ENDPOINTS_FILTER we can take entitlements from parent endpoint to the child endpoints. But there we need to mention the entitlements like,

{
"A_AD": [
{
"memberOf": [
"CN=Finanace_A_AD_DESIGNER,OU=Groups,OU=Administration,DC=Company,DC=com",
"CN=Sales_A_AD_APP_ADMIN,OU=Groups,OU=Administration,DC=Company,DC=com"
]
}}

Suppose there are 100 entitlements in the parent endpoint and through ENDPOINTS_FILTER 25 entitlements are taken to Child Endpoint 1 & 25 entitlements are taken to Child Endpoint 2 respectively. Now, is there any configuration possible where the remaining entitlements directly requestable to the Child Endpoint 3 ?

Regards,

Indranil

3 REPLIES 3

nimitdave
Saviynt Employee
Saviynt Employee

If you are looking for an option to have rest of the 50 entitlements be mapped to a 3rd endpoint without any mapping defined in endpoint filter, then that is not available.

dgandhi
All-Star
All-Star

No, you will have to configure all the child endpoints in your connector configuration.

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

rushikeshvartak
All-Star
All-Star

Endpoint filter works on inclusion. Whatever specified will be created. System will not assume


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.