Assign AD group1 to an account when group2 has indicator=1

[rashmirudrappa]

Hi Team,

The is a client requirement to achieve the below task.

For Example
1. TestUser1 has 2 AD accounts: 1 primary and 1secondary
1. Consider 2 AD groups/entitlements: Group1 & Group2
2. For any account, when access request is raised to add Group1 which has indicator=1
3. Then, Add Group1 to the requested account.
4. Also add Group2 to the primary account

Could you please let me know how can we achieve this requirement?
Can Request Rule be used?

Thank you

Rashmi

[dgandhi]

You can assign it using actionable analytics. Provision Access should be the default action.

In the query you can check if the group1 is already assigned or not, if assigned then assign group 2.

[rushikeshvartak]

• Use OOTB functionality 
  • Add Primary Group as Entitlement Map under Secondary Group.
  • https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter02-Identity-Repository/Under...

[NM]

Hi @rashmirudrappa , are both the accounts part of same endpoint?

[rashmirudrappa]

Thank you all. I will verify the options provided.

Yes. Both accounts are part of same endpoint.

Thank you

Rashmi

[NM]

@rashmirudrappa , then use actionable analytics.