Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/12/2022 01:23 PM
We have a use case where,
When a request is created for entitlement A of entitlement type X, pending task should be created for entitlement B of Y entitlement type.i.e,
When entitlement A is requested, the assignment of the entitlement B should be done when role A is being assigned. Entitlement B should match to appropriate role A and assign automatically.
Also removal of entitlement B of entitlement type Y, based on the entitlement A of entitlement type X removal being requested.i.e,
When a entitlement A is requested to be removed, the respective entitlement B should be removed.
04/12/2022 03:11 PM
Hello Sucheta,
Is your requirement that you have discussed for an entitlement (single access) or a Role (collection of access) ?
It seems that you have interchangeably used it and just wanted a clarification.
Regards,
Avinash Chhetri
04/12/2022 03:11 PM
Hi Avinash,
This is for SAP system. Basically we need to assign respective profiles to 'saproles' when any saprole is being requested in Saviynt and same goes for removal, i .e, remove respective profile when removal of saprole requested.
saproles are getting collected as entitlements in Saviynt however we do have child associations with it. For composite roles, single roles are associated and for single roles, tcodes and auth objects are associated.
Please let me know if any further information is needed.
Thanks,
Sucheta
04/12/2022 03:11 PM
Sucheta,
Please check the associated entitlement section in the link below and see if that helps.
Regards,
Avinash Chhetri
05/12/2022 12:56 AM
Entitlement Map feature may be explored for this use-case. With entitlement maps you can provision/deprovision entitlements from different entitlement types and from different endpoints as well.