Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Assign Role to Entitlements with same Entitlement_Values

adriencosson
Valued Contributor
Valued Contributor

Hi folks,

We are integrating with SAP HANA database which has reconciled multiple entitlements with the same entitlement_value.

adriencosson_0-1720599415759.png

The entitlements are effectively different as they target a different schema.

However, I want to import Roles and associated these roles to specific "consumption" entitlements.

Since I don't want to rename the entitlement_values in order not to break the access import, is there a way in Saviynt to import Roles to Entitlements using entitlement_valuekey for instance ?

Thanks !

 

Regards,
Adrien COSSON
7 REPLIES 7

NM
Esteemed Contributor
Esteemed Contributor

Hi @adriencosson , by import role and mapping you mean??


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

adriencosson
Valued Contributor
Valued Contributor

Hi @NM,

Any solution would be suitable for me if I can have a bulk upload process (importing through CSV or whatever).

I have tried :

  • with Enhanced Query but inserting role_entitlements is prevented.
  • with API using "updateEntrepriseRoleRequest" but entitlement_valuekey is not available, we must use entitlement_value there.

thanks.

 

 

Regards,
Adrien COSSON

NM
Esteemed Contributor
Esteemed Contributor

Never tried the use case .. but maybe you can explore db connector role import json


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

rushikeshvartak
All-Star
All-Star
  • Entitlement name needs to be unqiue
  • you can’t use api / csv / Enhanced query as workaround

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

adriencosson
Valued Contributor
Valued Contributor

Hi @rushikeshvartak ,

Thing is : 

  • We are using HANA standard connector in which there is not configuration to set the mapping with entitlement_values, we only mention the tables to be imported (like SAP connections)
  • We looked for API, CSV and Enhanced Query but : 
    • API does not allow to map entitlements with roles using entitlement_valuekey
    • CSV does not allow to map entitlements with roles using entitlement_valuekey
    • Enhanced Query prevents from inserting into role_entitlements.

Hence the solution that is now working is : 

  • Renaming the entitlement_values based on combination of entitlement_value and customproperty2 (schema) from SAP HANA.
  • Trigger Import job to validate that entitlements do not get created with former entitlement_value : OK since the correlation happens on the "role id" stored in entitlementid column
  • Associate through CSV the imported roles with renamed entitlements.

Regards.

Regards,
Adrien COSSON

  • Yes renaming entitlement will not work in long run. 
  • please raise idea ticket for such use case

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

adriencosson
Valued Contributor
Valued Contributor

Hi @rushikeshvartak 

Idea has been created accordingly : https://ideas.saviynt.com/ideas/EIC-I-5954

Feel free to add a vote !

Regards,
Adrien COSSON