Hi @DixshantValecha,
The scenario is as follows:
- we have security sensitive group in AD, the entitlement type 'memberof'
- we use analytical reports to automatically add users of certain type to the group as soon as the new account is created
- some user needs to be excluded from the group membership
- for exclusions we created a new entitlement type (exclusion group) and added entitlements that are present only in EIC, the reason for that is to avoid membership changes in AD
- users can request membership of exclusion group via ARS
- at the moment we need to manually close the tasks to add/remove users from exclusion entitlement because the endpoint (ADSI) type is configured to handle only one entitlement type in JSON.
What we want to to do is to automatically handle additional entitlement types in add/remove access JSON.
Hope that clarifies it.
Kind regards,
Piotr Jakimiuk
