Click HERE to see how Saviynt Intelligence is transforming the industry. |
02/28/2024 07:24 AM - edited 02/28/2024 07:25 AM
We assign entitlements to accounts using a custom query which checks if a substring of the users customproperty7 has the same value as an entitlements customproperty2. We do this because a users CP7 can be something like chemistry,maths,biology (multiple entitlement names).
Our custom query looks like this:
The problem starts when we try to check the birthright checkbox under the action. When a user starts with group math and is assigned this entitlement, everything works as designed. But if a new import runs and the users group is changed to biology for example, the user gets assigned the new entitlement but keeps the entitlement math.
What is supposed to happen is the birthright should check if math is still a group in the users CP7 and if it isn't, the entitlement account linking should get removed as the user should not have this entitlement linking anymore.
Can anyone tell us if this is supported or not, as for standard actions the birthright checkbox works fine.
02/28/2024 08:07 PM
Enable Remove Birthright Access if condition fails
03/04/2024 04:18 AM
That is what we are using. We check both Birthright and Remove Birthright Access if condition fails when using the query actions but it doesn't work.