Does Azure connector support Nesting of security groups?

[hirenp]

Does Azure connector support nesting of security groups? Graph API does support the nesting of security groups but I did not see any configuration related to the same in connection Json.

{
"connection": "userAuth",
"url": "https://graph.microsoft.com/v1.0/groups",
"httpMethod": "Post",
"httpParams": "{\"description\": \"${roles.description==null || roles.description==''? roles.displayname : roles.description}\", \"displayName\": \"${roles.displayname==null || roles.displayname==''? roles.role_name : roles.displayname}\", \"groupTypes\": [\"${roles.customproperty21=='Office365'? 'Unified' : ''}\"], \"mailEnabled\": \"${roles.customproperty22 == '1' ? true : false}\", \"mailNickname\": \"${roles.displayname==null || roles.displayname==''? roles.role_name : roles.displayname}\", \"securityEnabled\": \"${roles.customproperty23 == '1' ? true : false}\",\"owners@odata.bind\": [\"${allOwner}\"]}",
"httpHeaders": {
"Authorization": "${access_token}",
"Content-Type": "application/json"
},
"httpContentType": "application/json"
}

POST https://graph.microsoft.com/v1.0/groups/{group-id}/members/$ref
Content-type: application/json

{
"@odata.id": "https://graph.microsoft.com/v1.0/directoryObjects/{id}"
}

[timchengappa]

Hi @hirenp 

Azure AD connector currently does not support importing nested groups.

Alternatively, you can explore the option to use our REST connector which supports the importing of nested entitlements provided the API response is in the supported format.

Ref Doc: https://docs.saviyntcloud.com/bundle/REST-v23x/page/Content/Developers-Handbook.htm
Please see the 'mappingTypes" attribute definition for more details...

Ref Forum: https://forums.saviynt.com/t5/identity-governance/mapping-child-entitlements-in-importaccountentjson...

[hirenp]

This question was not about reconciliation but provisioning nest

[rushikeshvartak]

You can use standard REST Connector

[hirenp]

@rushikeshvartak  Do you know if saviynt Azure connector does not support nesting and hence you are recommending REST connector?

[rushikeshvartak]

Yes