Click HERE to see how Saviynt Intelligence is transforming the industry. |
10/09/2023 04:45 AM
Hello,
Customer is looking to update to EIC and we would like to know if EIC supports the ManagedBy Char mapping, to map the owner of an AD group as the entitlement owner?
Also if this would be possible to be done with users in different endpoints, so user from endpoint 1 is mapped as owner in Endpoint 2 but does not exist under Endpoint 2.
Kind regards,
mihai
10/09/2023 05:17 AM
@Mihai Use below highlighted mappings in groupimportJSON of AD connection in Saviynt and run the access import job all group owners will be imported into Saviynt with Rank1.
{ "entitlementTypeName": "memberOf", "performGroupAccountLinking": "true", "importGroupHierarchy": "true", "incrementalTimeField": "whenChanged", "groupObjectClass": "(objectclass=group)", "mapping": "memberHash:member_char,customproperty1:sAMAccountType_char,customproperty2:instanceType_char,customproperty3:memberof_char,customproperty16:uSNCreated_char,customproperty4:groupType_char,customproperty5:dSCorePropagationData_char,customproperty12:dn_char,customproperty13:cn_char,lastscandate:whenCreated_date,customproperty15:managedBy_char,entitlement_glossary:description_char,customproperty9:name_char,customproperty10:objectCategory_char,customproperty11:sAMAccountName_char,customproperty14:objectClass_char,status:isCriticalSystemObject_char,entitlement_value:distinguishedName_char,customproperty18:distinguishedName_char,updatedate:whenChanged_date, customproperty15:managedBy_char,Entitlementid:objectGUID_Binary,RECONCILATION_FIELD:Entitlementid,description:description_char",
"entitlementOwnerAttribute":"managedBy",
"tableFieldAttribute":"accountID"}
Refer the bleow doc for more information.
Configuring the Integration for Importing Accounts and Access (saviyntcloud.com)
10/09/2023 06:23 AM
Hi,
Thank you for that but I just want to make sure that it was taken in consideration that the user that would be used as the owner, is existing in one endpoint but doesn't have an account in the other endpoint. What we have noticed in older version is that the mapping is not working as the system is searching for an account for the user who is under ManagedBy.
Kind regards,
Mihai