Add/Remove Entitlement When Application Account is Requested To Be Enabled/Disabled

[Sivagami]

We have a feature to add entitlement with new account tasks on the endpoint level.

What if I have a requirement to remove the entitlement added as part of this feature when the application account is requested to be disabled and add the entitlement back when the application ac count is requested to be enabled.

I know we can create actionable analytics to get the group added / removed based on account status. But, would like to know if there is an alternate option to fulfil the requirement.

-Siva

[sahajranajee]

Hi Siva,

The easiest way to achieve this requirement is to have an actionable analytics to look for all accounts not having the 'entitlement with new account' and provision it.

That being said, you can also use a SaviyntForSaviynt user import with a similar query to identify and flag users having an active account and not having the basic entitlement and provision the access via a technical rule.

[rushikeshvartak]

For Disable Actionable report will work. But how to identify old entitlement with account while re-enable or enable means user can request by themselves?