Determine if access was granted through Saviynt ARS

[gmalizon]

Can Saviynt capture entitlement access that was granted without a Saviynt request? We couldn't find the tables to create an analytic report to obtain this information. 

[PremMahadikar · Accepted solution]

Hi @gmalizon ,

This article answers your request: How to find "Out of Band Entitlements" - Saviynt Forums - 50434

Quick query:

SELECT u.username,
       et.entitlementname,
       ev.entitlement_value,
       ep.endpointname
FROM   users u,
       user_accounts ua,
       accounts a,
       account_entitlements1 ae1,
       entitlement_values ev,
       entitlement_types et,
       endpoints ep
WHERE  u.userkey = ua.userkey
AND    a.accountkey = ua.accountkey
AND    a.accountkey = ae1.accountkey
AND    ae1.entitlement_valuekey = ev.entitlement_valuekey
AND    ep.endpointkey = a.endpointkey
AND    ev.entitlementtypekey = et.entitlementtypekey
AND    ep.endpointkey IN (pleaseINSERT comma-seperated endpointkeys here)
AND    ae1.arstaskkey IS NULL;

If this helps your question, please consider selecting Accept As Solution and hit Kudos

[gmalizon]

Thank you so much. This should work. We'll just update the query to display additional information.