We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Creating Ownership User Groups for Entitlements

psrimanth
New Contributor II
New Contributor II

Hi Team,

We have a requirement to fetch the owners of each entitlement from Target and create user groups in Saviynt with those entitlement owners.

We are looking for a feasible approach to achieve this.

Thanks,

Srimanth.

5 REPLIES 5

Manu269
All-Star
All-Star

@psrimanth Creating a user group in Saviynt dynamically is not possible.

1. Instead what you can do is Identify all the combination and create a user group in Saviynt.

2. Fetch all the owners from entitlements.

3. Create an actionable analytics with provision access to assign those users to usergroup.

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

rushikeshvartak
All-Star
All-Star

Use Custom Extension and use REST API to create User Groups


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi Rushikesh,

Is this possible for the AD connection, and OOTB connection.

No automatic usergroup creation is not supported. 

another workaround after AD import use Sav4Sav REST API connector and call group creation api to create groups.

API - https://documenter.getpostman.com/view/23973797/2s9YXce5Yd#c7808310-d73d-4127-b5f6-9bb106d4f4b6


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Rajesh-R
Saviynt Employee
Saviynt Employee

@psrimanth - What is the use case behind this specific ask.? There will be a scaling issue if there are 100K entitlements and you will be having 100K User groups and it will become hectic to manage for each entitlement.

Meanwhile  AD Connector already comes with the following: Entitlement Owner can be updated automatically by reading the manager of the entitlement from the AD -

  1. Single Valued Attribute in AD. 
  2. Multi Valued Attribute in AD.

Link: https://docs.saviyntcloud.com/bundle/AD-v23x/page/Content/Configuring-the-Integration-for-Importing-...

  1. Single Valued Attribute in AD - Refer Section - Example 1 - To import single group owner from a user-defined single-valued group attribute, add the following entry in the JSON.
  2. Multi Valued Attribute in AD - Refer Section - To import multiple group owners from a user-defined multi-valued group attribute, add the following entry in the JSON.

Thanks
Rajesh Ramalingam
Saviynt India