Best Practice for Assigning existing users to roles when they already have the entitlements

[aundreb]

What is the best practice for assigning users to roles when they already have the entitlements associated to the role after you do a reconciliation into Saviynt?

Example:

1) Existing identites have accounts and entitlements correlated to them after doing a reconciliation from App A.

2) You assign users in bulk to Role A via API that has the same entitlements that were reconciled in for their account from App A.

Will the entitlements be managed for the users through the role after they are assigned to it? 

Does Saviynt still generate tasks for a user that need to be completed if they already have the entitlements in the role from the reconciliation?

[DixshantValecha]

Hi @aundreb,

Thank you for contacting the Saviynt forums. We are currently in the process of investigating your inquiry and will promptly provide you with an update. Your patience is greatly appreciated.

[DixshantValecha]

Hi @aundreb,

We kindly request that you furnish us with additional details pertaining to your business use case. Your comprehensive input will assist us in gaining a deeper understanding of your specific requirements and enable us to offer more tailored and effective solutions. Thank you for your cooperation in providing this information.

[aundreb]

Hi Dixshant, 

My first post has all the details needed.

What is the best practice for assigning users to roles when they already have the entitlements associated to the role after you do a reconciliation into Saviynt?

I am trying to achieve the following:

1) I am migrating a client out of ISIM and to Saviynt. This includes all their Enterprise roles, applications and accounts.

2) Existing identites have accounts and entitlements correlated to them after doing a reconciliation from multiple applications.

3) We will assign users in bulk to saviynt roles that manage the entitlements that are currently assigned to exisiting user accounts that are reconciled into Saviynt.

How will the entitlements be managed for the users through the role after they are assigned to the role if they already have the entitlements assigned to the account from the previous identity solution? 

Does Saviynt still generate tasks for a user  if they already have the entitlements on their account from the reconciliation from an application into Saviynt?