Call datasets information to assign safe to the respective ADgroup

[RizvanaShaik]

Hello Team ,

We have REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint.

I know we can do it via EntitlementMapping but since bulk entitlement mapping is not available as an option. Since we have created dataset with this safe-AD mapping details.We have utilized the following query to retrieve values from a dataset in the Dynamic attribute, where the type is set as SQL Enum.

Query: SELECT DISTINCT ATTRIBUTE1 AS SafeName, ATTRIBUTE2 AS ADGroupName FROM dataset_values WHERE datasetname = 'safeAD' ORDER BY ATTRIBUTE1 ASC

but in background, based on safe-AD group mapping they will get added to AD groups under AD endpoint logically.

If this is not the best approach can anyone suggest is there any other way to call datasets via API to map based on safe-AD groups.

We also have another approach where  REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint. 

Please suggest to us how should we address this. 

[rushikeshvartak]

You can use entitlement map concept or actionable report

[RizvanaShaik]

How can we achieve this using actionable report. Can you please elaborate the use case

[RizvanaShaik]

and how we can correlate the dataset values, if the user is selected the specific safe from the ARS.

[rushikeshvartak]

As mentioned use entitlement map instead of Dataset. You can't attach to user.

[RizvanaShaik]

We have the bulk data to upload with different safes irrespective of different AD groups, so please suggest is it possible to achieve the parent- child entitlement which creates a task. Please check the below attached sample data file.

if not, how can we achieve this by using actionable analytics. Please suggest the best approach for this scenario.

[rushikeshvartak]

Create Dummy Entitlement Type of Safe and map Safe under the actual AD Group as entitlement map

[RizvanaShaik]

I have Created a Dummy Entitlement Type of Safe and mapped the Safe under the Actual AD Group as entitlement Map, but while requesting the Safe from the ARS, I didn't get the AD group .

Can you please specify the next steps to be carried out.

Thanks,

Rizvana

[rushikeshvartak]

Once request is approved entitlement added under ent map will be added

[RizvanaShaik]

Can you please provide the entitlement mapping sample file(which is parent and child mapping ) to upload?

[rushikeshvartak]

Refer https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter02-Identity-Repository/Under...