Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Birthright roles through analytics or rules

sab2
Regular Contributor
Regular Contributor

Hi,

We are working to setup our joiner workflow and we have 130 birthright roles.

Our requirement for the roles is to check the user has an active AD account and/or active Azure account and/or active Okta account assigned to their profile before assigning it as part of birthright.

We want to use user update rules but there is no condition to check for accounts and/or status of accounts. Is the only option for this to use analytics to assign the birthright roles? or does anyone have ideas on an approach?

Additional info is, for future dated hires, users will immediately get their accounts created but roles/ access are not assigned until actual start dates.

Thanks!

1 REPLY 1

rushikeshvartak
All-Star
All-Star

You can check accounts status in technical rule using advanced query

refer https://forums.saviynt.com/t5/identity-governance/advanced-query-identifying-users-without-ad-accoun...


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.