Dynamic Attribute for Service Account creation OU

[fouriefb]

Hi Experts,

We have a dynamic attribute for a field which we call application name which represents the Application OU  where service account is to be created. 

We are using the below query to get the second OU name in the Applications OU (where they keep service accounts) 

select distinct SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(entitlement_value,',OU=',2),'OU=',-1),',DC=',1) as id from entitlement_values where entitlementtypekey = (select entitlementtypekey from entitlement_types where entitlementname='memberOf' and endpointkey = (select endpointkey from endpoints where endpointname='Active Directory') and entitlement_value like "%,OU=Applications%" order by id asc

Whilst this is working it only brings the application name for OU where there is already an account created, the other (empty) OU's are not showing up.

As normal Enum is limited in characters we cannot use that.

Any ideas how we can work around this to see all OU's show up as Application for our Dynamic attribute even if there is no service account in the OU as yet.

Hope the above makes sense

[sk]

Can  you give me the example OUs that you expected to see but not?

[fouriefb]

Hi,

There is for example Backup and Billing and IN under the Applications OU which is not showing up

Thx

[sk]

I am not sure if it is typo while pasting the query but I see format issue with query, try below

select distinct SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(entitlement_value,',OU=',2),'OU=',-1),',DC=',1) as id from entitlement_values where entitlementtypekey = (select entitlementtypekey from entitlement_types where entitlementname='memberOf' and endpointkey = (select endpointkey from endpoints where endpointname='Active Directory')) and entitlement_value like "%,OU=Applications%" order by id asc

Also I wanted the OU structure which are not showing to see if there is any issue with substring logic

[fouriefb]

Hi sk,

Thanks for the reply. It is probably just paste issue as it's the same as yours above currently.

Please see structure query is bringing as to what is expected below that

Thanks in advance

[sk]

Do you have entitlements coming in all these OUs? Looking at AD screenshot I don't think some of the OUs have entitlement.

Because your query built around getting name from entitlement OU. if you don't have an entitlement in respective OU then you might not be able to show them. As far as query logic point of view I don't see any issue only thing is it will not show name of application if an entitlement is not coming from that OU.

If you want to show the application name irrespective of whether entitlement exist is respective ou or not then I would suggest other ways to do it.

1. Export the list of OUs from AD and import in to Saviynt as a Dataset and use a query to list the application names  in Dynamic Attribute from dataset.
2. Another way is configure OU import using AD connector which will bring OUs into Saviynt and then use the query to list application names in Dynamic Attributes