Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Call datasets information to assign safe to the respective ADgroup

RizvanaShaik
New Contributor
New Contributor

Hello Team ,

We have REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint.


I know we can do it via EntitlementMapping but since bulk entitlement mapping is not available as an option. Since we have created dataset with this safe-AD mapping details.We have utilized the following query to retrieve values from a dataset in the Dynamic attribute, where the type is set as SQL Enum.

Query: SELECT DISTINCT ATTRIBUTE1 AS SafeName, ATTRIBUTE2 AS ADGroupName FROM dataset_values WHERE datasetname = 'safeAD' ORDER BY ATTRIBUTE1 ASC

but in background, based on safe-AD group mapping they will get added to AD groups under AD endpoint logically.

If this is not the best approach can anyone suggest is there any other way to call datasets via API to map based on safe-AD groups.

We also have another approach where  REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background based on safe-AD group mapping they will get added to AD groups under AD endpoint. 

Please suggest to us how should we address this. 

10 REPLIES 10

rushikeshvartak
All-Star
All-Star

You can use entitlement map concept or actionable report


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

How can we achieve this using actionable report. Can you please elaborate the use case

and how we can correlate the dataset values, if the user is selected the specific safe from the ARS.

As mentioned use entitlement map instead of Dataset. You can't attach to user.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

We have the bulk data to upload with different safes irrespective of different AD groups, so please suggest is it possible to achieve the parent- child entitlement which creates a task. Please check the below attached sample data file.

if not, how can we achieve this by using actionable analytics. Please suggest the best approach for this scenario.

Create Dummy Entitlement Type of Safe and map Safe under the actual AD Group as entitlement map


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

I have Created a Dummy Entitlement Type of Safe and mapped the Safe under the Actual AD Group as entitlement Map, but while requesting the Safe from the ARS, I didn't get the AD group .

RizvanaShaik_0-1713960248167.png

Can you please specify the next steps to be carried out.

Thanks,

Rizvana

Once request is approved entitlement added under ent map will be added


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Can you please provide the entitlement mapping sample file(which is parent and child mapping ) to upload?

Refer https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter02-Identity-Repository/Under...


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.