We are using /createrequest API to grant entitlements, and running into issue when the user does not have an parent account (Active Directory). We are seeing a 'New Account' task created for "Child_endpoint", but the task is failing as there is no Parent Active Directory account.
Is there a way to configure this JSON so Saviynt creates both Parent and Child 'New Account' tasks ?
{
"requesttype":"ADD",
"username":"ABCD",
"endpoint":"Child_endpoint",
"securitysystem":"Active Directory",
"accountname":"ABCD",
"requestor":"API",
"createaccountifnotexists":"true",
"createnewaccounttaskifnotexist":"true",
"accountid":"CN=ABCD,OU=XYZ,DC=XXXX,DC=com",
"dynamicattr": {
"TicketNumber" :"RITMXYZ",
},
"entitlement":[
{"entitlementtype":"memberOf","entitlementvalue":"CN=Entilement_1,OU=groups,DC=xxxx","businessjustification":"test" }
]
}
