Hi Saviynt Community,
as a follow up on this topic i would like to ask, the long Query execution would be worse once we are in the production and have more than 100 thousands entitlements to assign right? so..
I'm currently exploring a solution to dynamically provision and deprovision access based on a user's accounttype using a dataset in Saviynt. Instead of manually writing multiple WHERE conditions for each accounttype in the query, I would like to create a more generalized approach. but i am not sure if dataset usage in this case is possible! can anyone please provide me with a use case?
Here’s an overview of my idea:
we create a table "dataset" with the following structure:
| accounttype | AD_ENT | LDAP_ENT |
| 123 | CN=12334,OU=xx,OU=xx | CN=7865,OU=xx,OU=xx |
| 867 | CN=254,OU=xx,OU=xx | CN=5685,OU=xx,OU=xx |
so Instead of hardcoding multiple conditions for each accounttype, I plan to use a dynamic SQL query that matches the user’s accounttype to the dataset and automatically provisions or deprovisions the corresponding entitlement. either in analytics or in Job enhanced query.
Has anyone implemented something similar? Does Saviynt support such dynamic lookups using datasets for provisioning and deprovisioning access? Also, is there a better approach or best practice for achieving this in Saviynt, especially when dealing with large-scale datasets and complex entitlement mappings? would this idea be a good practice ?
Any feedback or suggestions would be greatly appreciated!
Thanks in advance for your help!
