Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Birthright checkbox not working for custom query technical rules

Caesrob
Regular Contributor
Regular Contributor

We assign entitlements to accounts using a custom query which checks if a substring of the users customproperty7 has the same value as an entitlements customproperty2. We do this because a users CP7 can be something like chemistry,maths,biology (multiple entitlement names).

Our custom query looks like this:

Caesrob_0-1709133604277.png

The problem starts when we try to check the birthright checkbox under the action. When a user starts with group math and is assigned this entitlement, everything works as designed. But if a new import runs and the users group is changed to biology for example, the user gets assigned the new entitlement but keeps the entitlement math

What is supposed to happen is the birthright should check if math is still a group in the users CP7 and if it isn't, the entitlement account linking should get removed as the user should not have this entitlement linking anymore.

Can anyone tell us if this is supported or not, as for standard actions the birthright checkbox works fine.

2 REPLIES 2

rushikeshvartak
All-Star
All-Star

Enable Remove Birthright Access if condition fails


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

That is what we are using. We check both Birthright and Remove Birthright Access if condition fails when using the query actions but it doesn't work.