Enterprise Role - Account/Entitlement Reconciliation

[Connoru23]

Hi team - We have a customer that associated enterprise roles with a variety of accounts whie the accounts were inactive during a cutover. If we want to retrigger the entitlement tasks that may have been missed for the accounts that were inactive, is there a recommended approach? We have around 10K potentially impacted accounts were we would like to match up the role expected access to these accounts that are now active. Let me know your thoughts on this. 

Thanks!

[rushikeshvartak]

Use Role Mismatch OOTB functionality

https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter17-EIC-Analytics/Managing-An...

[Connoru23]

Does this functionality allow for you to regenerate the tasks for the mismatches?

[rushikeshvartak]

No You can copy query from report and create duplicate actionable report

Refer https://forums.saviynt.com/t5/identity-governance/generate-tasks-for-mismatched-role-access/m-p/9648...

[Connoru23]

It looks like we can't modify this role mismatch query in our tenant. Is the expectation that it will generate the add access tasks when there is a mismatch?

[rushikeshvartak]

You need to create new report with help of existing query. you can't update OOTB report  Refer above reply for sample query