Does EIC support for an entitlement to have owner set from AD group

[Mihai]

Hello, 

Customer is looking to update to EIC and we would like to know if EIC supports the ManagedBy Char mapping, to map the owner of an AD group as the entitlement owner? 

Also if this would be possible to be done with users in different endpoints, so user from endpoint 1 is mapped as owner in Endpoint 2 but does not exist under Endpoint 2. 

Kind regards, 
mihai

[SumathiSomala]

@Mihai Use below highlighted mappings in groupimportJSON of AD connection in Saviynt and run the access import job all group owners will be imported into Saviynt with Rank1.

{ "entitlementTypeName": "memberOf", "performGroupAccountLinking": "true", "importGroupHierarchy": "true", "incrementalTimeField": "whenChanged", "groupObjectClass": "(objectclass=group)", "mapping": "memberHash:member_char,customproperty1:sAMAccountType_char,customproperty2:instanceType_char,customproperty3:memberof_char,customproperty16:uSNCreated_char,customproperty4:groupType_char,customproperty5:dSCorePropagationData_char,customproperty12:dn_char,customproperty13:cn_char,lastscandate:whenCreated_date,customproperty15:managedBy_char,entitlement_glossary:description_char,customproperty9:name_char,customproperty10:objectCategory_char,customproperty11:sAMAccountName_char,customproperty14:objectClass_char,status:isCriticalSystemObject_char,entitlement_value:distinguishedName_char,customproperty18:distinguishedName_char,updatedate:whenChanged_date, customproperty15:managedBy_char,Entitlementid:objectGUID_Binary,RECONCILATION_FIELD:Entitlementid,description:description_char",
"entitlementOwnerAttribute":"managedBy",
"tableFieldAttribute":"accountID"}

Refer the bleow doc for more information.

Configuring the Integration for Importing Accounts and Access (saviyntcloud.com)

[Mihai]

Hi, 
Thank you for that but I just want to make sure that it was taken in consideration that the user that would be used as the owner, is existing in one endpoint but doesn't have an account in the other endpoint. What we have noticed in older version is that the mapping is not working as the system is searching for an account for the user who is under ManagedBy. 

Kind regards, 
Mihai