Configuring Entitlements for AD - Best Practice

[Roua]

Hello everyone,

I am asking for an advice on the best approach to configure entitlements for Active Directory. Specifically, I want to understand if the only way to configure these entitlements is through technical rules for each one, or if it is possible to configure them in the AD mapping, such as groupImportMapping.

For example, we have several entitlements like the following:

users.Employeeclass:      045
DN of group:         CN=test,OU=test,OU=test,OU=test,OU=test,OU=test,DC=test,DC=test,DC=test
There are more than 10 such entitlements that need to be configured.

Could someone please guide me on whether I need to create individual technical rules for each of these entitlements, or if there is a more efficient way to handle this through AD mapping configurations?

Thanks in advance for your help!

[NM]

Hi @Roua, do you want to create AD groups from saviynt or assign already created groups to account.

[Roua]

Hi @NM they are already created in AD.

[NM]

If DN of the group is matching with user property you can assign dynamically.

[userNM]

no, do not match, but the point is, if can we only do it via Technical rules?

The entitlements are coming from AD in Saviynt and we want to assign them there to the accounts and users.

So, as it was written e.g. if

users.Employeeclass= 045

then the entitlement
DN of group: CN=test,OU=test,OU=test,OU=test,OU=test,OU=test,DC=test,DC=test,DC=test

is assigned and provisioned to the target system as well.

[NM]

Hi @userNM @Roua , analytics is also an option where you can assign group on the basis of user employee class.

[userNM]

thank you! but we need to provision them as Birthrights... I think with Analitics it is not really possible...

[NM]

It is possible but if you want to provision when user is created .. then technical rule is the only option.

[rushikeshvartak]

• Does employee class is same for multiple employees ?
•  

[Roua]

Yes it is:

[rushikeshvartak]

Since employee class are handy create those many rules