assigning Birthright rules for users already in EIC

Robbe_Cronos
Regular Contributor II
Regular Contributor II

Hello,

We are making technical rules which should apply birthright access to new users in EIC. This works fine when a new user is imported, but we also want the birthright technical rule to trigger when users are already imported (to check if they still match the conditions). 

We noticed the DetectiveProvisioningRulesJob is deprecated and that we should use the SaviyntForSaviynt connector for this. We don't really understand how we need to use this to trigger the technical rules. Does anyone have some information on this?

We looked at a video of "Meet the Experts" but this didn't really help us.

5 REPLIES 5

Darshanjain
Saviynt Employee
Saviynt Employee

Hello,

Are you looking for some specific users or one time or everyday it has to check for users and match the rules and trigger birthright rules?

Robbe_Cronos
Regular Contributor II
Regular Contributor II

Every time a user's attributes are updated in any way, the birthright rule should check if the user still has access.

Okay in that case, you can mark the technical rule as Detective as well as run the job ( if its already created - as saviynt still allows it to run the job ), Also as said by rushikesh you can check out this-

https://forums.saviynt.com/t5/identity-governance/detectiveprovisioningrulesjob-is-this-job-deprecat...

Sheba
New Contributor III
New Contributor III

Hi,

There is an option in Technical Rule called 'Remove Birth right if condition fails' . this will remove the access from existing user, if the user no longer meeting the criteria provided during import.

Sheba_0-1676543164443.png

Thanks,

S

rushikeshvartak
All-Star
All-Star

Refer alternative

https://forums.saviynt.com/t5/identity-governance/detectiveprovisioningrulesjob-is-this-job-deprecat...


Regards,
Rushikesh Vartak
If the response is helpful, please click Accept As Solution and kudos it.