Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

AD Entitlement Imported Status "InActive"

weixiangteoh
New Contributor II
New Contributor II

Hi All,

We having issue all Entitlements ( AD Group ) imported via Application Data Import (Single Threaded) ,all entitlement status always become "InActive".  Have tried to update "activeGroupPossibleValues" as below. Let us know if any parts of configuration is wrong. Thanks

Refer below for JSON on GroupImportMapping XML

{
"entitlementTypeName": "memberOf",
"importGroupHierarchy": "true",
"performGroupAccountLinking": "true",
"importnestedmembershipoutofscope": "true",
"incrementalTimeField": "whenChanged",
"groupObjectClass": "(objectclass=group)",
"entitlementOwnerAttribute": "managedBy",
"tableFieldAttribute": "accountID",
"advanceGroupFilter":
{"memberOf":
{"CN=XX,DC=XX,DC=XX,DC=XX,DC=XX,DC=XX": ["(&(objectClass=group))"],
"OU=Office365,DC=XX,DC=XX,DC=XX,DC=XX,DC=XX": ["(&(objectClass=group))"]
}
},
"mapping": "memberHash:member_char,customproperty1:sAMAccountType_char,customproperty2:instanceType_char,customproperty3:uSNCreated_char,customproperty4:groupType_char,customproperty7:dSCorePropagationData_char,customproperty12:dn_char,customproperty13:cn_char,lastscandate:whenCreated_date,customproperty15:managedBy_char,entitlement_glossary:description_char,description:description_char,displayname:name_char,customproperty9:name_char,customproperty10:objectCategory_char,customproperty11:sAMAccountName_char,entitlement_value:distinguishedName_char,entitlementid:objectGUID_Binary,customproperty14:objectClass_char,updatedate:whenChanged_date,customproperty5:memberOf_char,customproperty17:distinguishedName_char,RECONCILATION_FIELD:customproperty18,customproperty18:objectGUID_Binary,status:isCriticalSystemObject_char",
"activeGroupPossibleValues": ["active","a","l","TRUE"]
}

2 REPLIES 2

SumathiSomala
All-Star
All-Star

@weixiangteoh  What are the possible values for active status?

"activeGroupPossibleValues": ["active","a","l","TRUE"]

run the access import job  by removing the above mapping

 

Regards,
Sumathi Somala

If this reply answered your question, please Accept As Solution and give Kudos.

weixiangteoh
New Contributor II
New Contributor II

@SumathiSomala 

Thanks for your suggestion.  It seems working now after remove this line "activeGroupPossibleValues" 

Previously was trying as below, all entitlement imported always "InActive".

"activeGroupPossibleValues": ["active","a","l","TRUE"]

"activeGroupPossibleValues": []