assigning Birthright rules for users already in EIC

[Robbe_Cronos]

Hello,

We are making technical rules which should apply birthright access to new users in EIC. This works fine when a new user is imported, but we also want the birthright technical rule to trigger when users are already imported (to check if they still match the conditions). 

We noticed the DetectiveProvisioningRulesJob is deprecated and that we should use the SaviyntForSaviynt connector for this. We don't really understand how we need to use this to trigger the technical rules. Does anyone have some information on this?

We looked at a video of "Meet the Experts" but this didn't really help us.

[Darshanjain]

Hello,

Are you looking for some specific users or one time or everyday it has to check for users and match the rules and trigger birthright rules?

[Robbe_Cronos]

Every time a user's attributes are updated in any way, the birthright rule should check if the user still has access.

[Darshanjain]

Okay in that case, you can mark the technical rule as Detective as well as run the job ( if its already created - as saviynt still allows it to run the job ), Also as said by rushikesh you can check out this-

https://forums.saviynt.com/t5/identity-governance/detectiveprovisioningrulesjob-is-this-job-deprecat...

[Sheba]

Hi,

There is an option in Technical Rule called 'Remove Birth right if condition fails' . this will remove the access from existing user, if the user no longer meeting the criteria provided during import.

Thanks,

S

[rushikeshvartak]

Refer alternative

https://forums.saviynt.com/t5/identity-governance/detectiveprovisioningrulesjob-is-this-job-deprecat...