Creating Ownership User Groups for Entitlements

[psrimanth]

Hi Team,

We have a requirement to fetch the owners of each entitlement from Target and create user groups in Saviynt with those entitlement owners.

We are looking for a feasible approach to achieve this.

Thanks,

Srimanth.

[Manu269]

@psrimanth Creating a user group in Saviynt dynamically is not possible.

1. Instead what you can do is Identify all the combination and create a user group in Saviynt.

2. Fetch all the owners from entitlements.

3. Create an actionable analytics with provision access to assign those users to usergroup.

[rushikeshvartak]

Use Custom Extension and use REST API to create User Groups

[psrimanth]

Hi Rushikesh,

Is this possible for the AD connection, and OOTB connection.

[rushikeshvartak]

No automatic usergroup creation is not supported. 

another workaround after AD import use Sav4Sav REST API connector and call group creation api to create groups.

API - https://documenter.getpostman.com/view/23973797/2s9YXce5Yd#c7808310-d73d-4127-b5f6-9bb106d4f4b6

[Rajesh-R]

@psrimanth - What is the use case behind this specific ask.? There will be a scaling issue if there are 100K entitlements and you will be having 100K User groups and it will become hectic to manage for each entitlement.

Meanwhile  AD Connector already comes with the following: Entitlement Owner can be updated automatically by reading the manager of the entitlement from the AD -

1. Single Valued Attribute in AD. 
2. Multi Valued Attribute in AD.

Link: https://docs.saviyntcloud.com/bundle/AD-v23x/page/Content/Configuring-the-Integration-for-Importing-...

1. Single Valued Attribute in AD - Refer Section - Example 1 - To import single group owner from a user-defined single-valued group attribute, add the following entry in the JSON.
2. Multi Valued Attribute in AD - Refer Section - To import multiple group owners from a user-defined multi-valued group attribute, add the following entry in the JSON.