AzureAD Connector: Filtering out AD onprem synced entitlements

[JennieS]

Can we filter out any entitlement that is being synced from onprem AD -> AzureAD.  We are not managing those entitlements in Saviynt right now.  

[SB · Accepted solution]

You can use ENTITLEMENT_FILTER_JSON for inclusion but unfortunately exclusion in not supported. You can raise an enhancement in Ideas portal if this is needed.

Below is an example of inclusion filter

{
		"group_filter":"startswith(displayname,'AZ')&$count=true"
	}

[rushikeshvartak]

As your version is v2021.x this feature is not supported 

Specifying the filter conditions using the ENTITLEMENT_FILTER_JSON element of the of the Import Config parameter used while executing custom access using the Application Data Import job is deprecated in Release v2022.0.1. However, the ENTITLEMENT_FILTER_JSON parameter is available while creating an Azure AD connection.

https://docs.saviyntcloud.com/bundle/AzureAD-v2022x/page/Content/Configuring-the-Integration-for-Acc...