Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Birthright roles through analytics or rules

sab2
Regular Contributor
Regular Contributor

Hi,

We are working to setup our joiner workflow and we have 130 birthright roles.

Our requirement for the roles is to check the user has an active AD account and/or active Azure account and/or active Okta account assigned to their profile before assigning it as part of birthright.

We want to use user update rules but there is no condition to check for accounts and/or status of accounts. Is the only option for this to use analytics to assign the birthright roles? or does anyone have ideas on an approach?

Additional info is, for future dated hires, users will immediately get their accounts created but roles/ access are not assigned until actual start dates.

Thanks!

1 REPLY 1

rushikeshvartak
All-Star
All-Star

You can check accounts status in technical rule using advanced query

refer https://forums.saviynt.com/t5/identity-governance/advanced-query-identifying-users-without-ad-accoun...


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.