AzureAD Access Import Jobs failing when the AAD Groups are deleted in AAD

[SugandhaVarma1]

Hello Techies,

We are facing a weird issue with Azure Access import job in Saviynt. 

The full access import is scheduled with 5 threads. we can see the error as: 

ResponseStatusCode-404, Failed url-https://graph.microsoft.com/v1.0/groups/87155dbb-1be4-4047-b0d5-73793856f024/owners?$Top=999&$select=id, Error Message - {"error":{"code":"Request_ResourceNotFound","message":"Resource '87155dbb-1be4-4047-b0d5-73793856f024' does not exist or one of its queried reference-property objects are not present.","innerError":{"date":"2024-03-08T17:52:19","request-id":"c3f6343d-1581-4af7-b3f3-74ce7cd8edd5","client-request-id":"fdb4e0b2-6e2a-4bf4-b38c-eff8c7255e69"}}}

On further investigation we found that the resource was deleted in Azure AD also the Entitlement was inactivated in Saviynt. 

I could not understand why the job should fail. It should inactivate and move to next record.

regards,

Sugandha

[Raghu]

@SugandhaVarma1  can check json and share connection details ? may be in config made inactive also pull records in saviynt eic

[SugandhaVarma1]

No @Raghu there is not any configuration the configuration is just Access import mapping. we are not even passing any URL. We have just client ID, secret and tenant. Also, we are using OOTB Azure AD template.

[rushikeshvartak]

This is expected behaviour as per current product desig. Please raise idea ticket for to handle this use case.

[SugandhaVarma1]

@rushikeshvartak Do we have any workaround for this. As I suppose this should be a common use case. Not sure how others are using/designing it.

[rushikeshvartak]

There is no workaround. I have created idea you can upvote same

https://ideas.saviynt.com/ideas/EIC-I-5739

[SugandhaVarma1]

Also, will it be same in EIC as well?