Azure AD - Unable to see membership for Channel Entitlement Type in Saviynt

[KarthikaMoorti]

Hi,

We were able to see memberships for Channel Entitlement Type got imported through the API call but not in the Saviynt.

Can someone assist with this issue?

[rushikeshvartak]

Do you see any error in logs

[KarthikaMoorti]

Hi Rushikesh, we do not see any error in the logs as AzureAD Access Import Job ran successfully.

[Manu269]

@KarthikaMoorti Are you using any config for ENTITLEMENT_ATTRIBUTE ?

[KarthikaMoorti]

Hi Manu269, yes we do have config for ENTITLEMENT_ATTRIBUTE in the connection.

[sudeshjaiswal]

Hello @KarthikaMoorti,

Can you please check  if you have mentioned the below sample in the Import Config ?

Sample :

{
  "importEntTypes": {
    "AADGroup": {},
    "Team": {},
    "Channel": {},
    "MemberPermission": {},
    "GuestPermission": {}
  },
  "excludeEntTypes": {
    "ApplicationInstance": {},
    "DirectoryRole": {},
    "Subscription": {},
    "Application": {},
    "DirectoryRoleMember": {},
    "SKU": {},
    "ServicePlans": {}
  }
}

 in the below job while running the ApplicationDataImport job.

For Ref: https://docs.saviyntcloud.com/bundle/AzureAD-v2021x/page/Content/Customizing-Entitlement-Import.htm 

Thanks

[KarthikaMoorti]

Hi @sudeshjaiswal, yes we do have the above Import config in the Job.

[sudeshjaiswal]

Hello @KarthikaMoorti,

Could you provide the configured "account_attributes" and "entitlement_attributes" JSON, along with the Import Config job snapshot?

Thanks.

[sudeshjaiswal]

Hello @KarthikaMoorti,

Can you please confirm if this is working now?

Thanks.

[aalvarez_mk]

Attaching the mentioned JSON for you here. Karthika is OOO.

[sudeshjaiswal]

Hello @KarthikaMoorti @aalvarez_mk,

Where the other Entitlement Type got imported apart from channels?

Thanks.

[KarthikaMoorti]

Hi @sudeshjaiswal, yes other than channels we could see other entitlement type membership has been imported in Saviynt.

[sudeshjaiswal]

Hello @KarthikaMoorti ,

Are you able to get the channel entitlement type in the postman? if, yes, can you try to run the importconfig with below sample.

{
  "importEntTypes": {
    "Channel": {}
  },
  "excludeEntTypes": {
    "ApplicationInstance": {},
    "MemberPermission": {},
    "GuestPermission": {},
    "AADGroup": {},
    "Team": {},
    "DirectoryRole": {},
    "Subscription": {},
    "Application": {},
    "DirectoryRoleMember": {},
    "SKU": {},
    "ServicePlans": {}
  }
}

 Thanks.

[KarthikaMoorti]

@sudeshjaiswal - We tried the above Import Config but still did not see the Channel membership in Saviynt.

[sudeshjaiswal]

Hello @KarthikaMoorti,

Could you try to remove the customproperty4 from the Account_Attribute mapping and map it to a other CP attribute other than customproperty4 and customproperty5 ?


And keep the below import config  in the job:

{
"importEntTypes": {
"AADGroup": {},
"Team": {},
"Channel": {},
"DirectoryRole": {},
"DirectoryRoleMember": {}
},
"excludeEntTypes": {
"ApplicationInstance": {},
"Subscription": {},
"Application": {},
"SKU": {},
"ServicePlans": {},
"MemberPermission": {},
"GuestPermission": {}
}
}

For Ref : https://docs.saviyntcloud.com/bundle/AzureAD-v24x/page/Content/Configuring-the-Integration-for-Accou... 

Thanks.