Assign Role to Entitlements with same Entitlement_Values

[adriencosson]

Hi folks,

We are integrating with SAP HANA database which has reconciled multiple entitlements with the same entitlement_value.

The entitlements are effectively different as they target a different schema.

However, I want to import Roles and associated these roles to specific "consumption" entitlements.

Since I don't want to rename the entitlement_values in order not to break the access import, is there a way in Saviynt to import Roles to Entitlements using entitlement_valuekey for instance ?

Thanks !

[NM]

Hi @adriencosson , by import role and mapping you mean??

[adriencosson]

Hi @NM,

Any solution would be suitable for me if I can have a bulk upload process (importing through CSV or whatever).

I have tried :

• with Enhanced Query but inserting role_entitlements is prevented.
• with API using "updateEntrepriseRoleRequest" but entitlement_valuekey is not available, we must use entitlement_value there.

thanks.

[NM]

Never tried the use case .. but maybe you can explore db connector role import json

[rushikeshvartak]

• Entitlement name needs to be unqiue
• you can’t use api / csv / Enhanced query as workaround

[adriencosson · Accepted solution]

Hi @rushikeshvartak ,

Thing is : 

• We are using HANA standard connector in which there is not configuration to set the mapping with entitlement_values, we only mention the tables to be imported (like SAP connections)
• We looked for API, CSV and Enhanced Query but : 
  • API does not allow to map entitlements with roles using entitlement_valuekey
  • CSV does not allow to map entitlements with roles using entitlement_valuekey
  • Enhanced Query prevents from inserting into role_entitlements.

Hence the solution that is now working is : 

• Renaming the entitlement_values based on combination of entitlement_value and customproperty2 (schema) from SAP HANA.
• Trigger Import job to validate that entitlements do not get created with former entitlement_value : OK since the correlation happens on the "role id" stored in entitlementid column
• Associate through CSV the imported roles with renamed entitlements.

Regards.

[rushikeshvartak]

• Yes renaming entitlement will not work in long run. 
• please raise idea ticket for such use case

[adriencosson]

Hi @rushikeshvartak 

Idea has been created accordingly : https://ideas.saviynt.com/ideas/EIC-I-5954

Feel free to add a vote !