Azure AD Access import Incorrect string value: '\xF0\x9F\x8C\x8D' for column 'ENTITLEMENT_VALUE' at

[ray]

Hello, this i my job to import access from azure ad.

I am getting the error below :

"Date Timestamp (UTC)","Service Name","Class Name","Thread Name","Log Level","Message"
"2024-09-02T09:37:03.322+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8C\x8D' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:37:02.883+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x92\x9A' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:37:00.436+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x92\x99KA...' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:59.395+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8C\xBC\x0A\xD0...' for column 'DESCRIPTION' at row 1"
"2024-09-02T09:36:48.206+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x98\x8A. ...' for column 'DESCRIPTION' at row 1"
"2024-09-02T09:36:47.997+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x9B\x92Av...' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:42.929+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8D\x80' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:41.648+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x91\x8B' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:40.582+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x91\x8D\xF0\x9F...' for column 'DESCRIPTION' at row 1"
"2024-09-02T09:36:37.434+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x91\x80' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:34.989+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x98\x8A' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:30.429+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8C\x8D' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:28.323+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x87\xA7\xF0\x9F...' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:27.263+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8C\x8D' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:20.629+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x93\x8A\xF0\x9F...' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:16.830+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x9B\xA0\xF0\x9F...' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:14.698+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x90\xB8' for column 'DESCRIPTION' at row 1"
"2024-09-02T09:36:06.199+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\x8E\xA8' for column 'ENTITLEMENT_VALUE' at row 1"
"2024-09-02T09:36:02.999+00:00","ecm-worker","generic.GenericProvisioningService","quartzScheduler_Worker-5-qs84s","DEBUG","INFO ErEx: processAADGroupList:persistObjects : Incorrect string value: '\xF0\x9F\xA7\x90' for column 'DESCRIPTION' at row 1"

Job logs details :

 

Anyone can help me to to solve this issue?

Thank you in advance,

Ray

[NM]

HI @ray there seems to be name issue with an entitlement can you search for the group in your tenant once. or use this in account_attribute - property~#~emchar

[GSR]

Hello Ray,

Incorrect string exception occurs during Azure AD access import

The following error message is displayed in the debug log file:

Incorrect string value: '\xF0\x9F\x93\xA7Op...' for column 'ENTITLEMENT_VALUE' at row 1

Cause: This error occurs while importing an entitlement that contains an emoji character in the attribute or entitlement name.

Resolution:

You can crop emoji characters in account and entitlement attributes by using the emchar data type. For example, if the givenName attribute of an Azure AD account includes emoji characters and you want to crop these characters, map this attribute in the colToPropMap attribute of the ACCOUNT_ATTRIBUTES parameter in a format similar to the following: “customproperty1”: “givenName~#~emchar”.

thank you

[ray]

Hello, i don't have issue with the account import, only with access import.

This is my import config : where should i add the emchar to test please?

{

"importEntTypes": {
"AADGroup": {}

"excludeEntTypes": {
"Oauth2Permission": {},
"InterAppOauthPermissions": {},
"SKU": {,
"ServicePlans": {},
"MemberPermission": {},
"GuestPermission": {},
"DirectoryRole": {},
"DirectoryRoleMember": {},
"Channel": {},
"Application": {},
"ApplicationInstance": {},
"Team": {},
"Subscription": {},
"AppRole": {}

}}

[rushikeshvartak]

In Azure AD Connection under - ENTITLEMENT_ATTRIBUTE

{
	"entitlementAttribute": {
		"AADGroup": {
			"colsToPropsMap": {
				"entitlementID": "id~#~char",
				"entitlement_value": "displayName~#~emchar",
				"description": "description~#~emchar",
				"customproperty1": "deletionTimestamp~#~char",
				"customproperty3": "membershipRule~#~char",
				"customproperty5": "dirSyncEnabled~#~char",
				"customproperty6": "lastDirSyncTime~#~char",
				"customproperty7": "mail~#~char",
				"customproperty8": "mailEnabled~#~char",
				"customproperty9": "onPremisesSecurityIdentifier~#~char",
				"customproperty10": "securityEnabled~#~char",
				"customproperty11": "groupTypes~#~listAsString",
				"customproperty13": "membershipRuleProcessingState~#~char",
				"customproperty16": "resourceProvisioningOptions~#~char",
				"customproperty17": "onPremisesSyncEnabled~#~char",
				"customproperty30": "visibility~#~char"
			}
		},
		"AADGroupOwners": {
			"colsToPropsMap": {
				"entitlementID": "id~#~char",
				"entitlement_value": "displayName~#~char"
			}
		}
	}
}

[NM]

@ray if you haven't defined entitlement_attribute json please do so with emchar

[rushikeshvartak]

• When Teams groups name /description contains special character then this error ocurrs.
• Please change data type to emchar 
  • Refer https://forums.saviynt.com/t5/saviynt-knowledge-base/how-to-resolve-incorrect-string-value-xf0-x9f-x...
• If the above does not resolve, then you need to get an export from the Azure AD team where groups contain special characters, and unfortunately, Saviynt logs do not specify entitlement, causing an issue.
• If Special character used from Microsoft directory, it gets fixed by Emchar, but if copied from another source, it needs to be removed manually   https://ideas.saviynt.com/ideas/EIC-I-5080