Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/19/2024 05:37 AM - edited 04/19/2024 05:41 AM
Hello Team ,
We have REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint.
I know we can do it via EntitlementMapping but since bulk entitlement mapping is not available as an option. Since we have created dataset with this safe-AD mapping details.We have utilized the following query to retrieve values from a dataset in the Dynamic attribute, where the type is set as SQL Enum.
Query: SELECT DISTINCT ATTRIBUTE1 AS SafeName, ATTRIBUTE2 AS ADGroupName FROM dataset_values WHERE datasetname = 'safeAD' ORDER BY ATTRIBUTE1 ASC
but in background, based on safe-AD group mapping they will get added to AD groups under AD endpoint logically.
If this is not the best approach can anyone suggest is there any other way to call datasets via API to map based on safe-AD groups.
We also have another approach where REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint.
Please suggest to us how should we address this.
04/19/2024 11:01 AM
You can use entitlement map concept or actionable report
04/22/2024 04:35 AM
How can we achieve this using actionable report. Can you please elaborate the use case
04/22/2024 04:46 AM
and how we can correlate the dataset values, if the user is selected the specific safe from the ARS.
04/22/2024 07:36 AM
As mentioned use entitlement map instead of Dataset. You can't attach to user.
04/22/2024 07:54 AM
We have the bulk data to upload with different safes irrespective of different AD groups, so please suggest is it possible to achieve the parent- child entitlement which creates a task. Please check the below attached sample data file.
if not, how can we achieve this by using actionable analytics. Please suggest the best approach for this scenario.
04/22/2024 07:36 PM
Create Dummy Entitlement Type of Safe and map Safe under the actual AD Group as entitlement map
04/24/2024 05:05 AM
I have Created a Dummy Entitlement Type of Safe and mapped the Safe under the Actual AD Group as entitlement Map, but while requesting the Safe from the ARS, I didn't get the AD group .
Can you please specify the next steps to be carried out.
Thanks,
Rizvana
04/24/2024 05:09 AM
Once request is approved entitlement added under ent map will be added
05/02/2024 02:04 AM
Can you please provide the entitlement mapping sample file(which is parent and child mapping ) to upload?
05/02/2024 09:09 PM - edited 05/02/2024 09:11 PM