Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Entitlement owner update using custom query

pramodk
New Contributor
New Contributor

We have a scenario where when Active Directory groups deleted in AD then on AD access import respective entitlments and roles are inactivated in Saviynt.

We currently running a custom query job to purge those entitlments, means we remove all CP values and rename the entitlment/role name with prefix Purged as a marker.

We able to update all attributes of an entitlement/role, but unable to remove entitlement's owners using custom query job (ECMv5.5).

As a temporary solution, we tried below query to set a dummy user as owner of those purged entitlments. Below query work for those entitlments which have only one owner, but it doesn't work if entitlment have more than one owner.

 
UPDATE 
entitlement_owners EO 
SET
EO.USERKEY = 1 
WHERE 
EO.ENTITLEMENT_VALUEKEY = 6123

 

3 REPLIES 3

NM
Esteemed Contributor
Esteemed Contributor

@pramodk @ry this

UPDATE 
entitlement_owners EO 
SET
EO.USERKEY = 1 
WHERE 
EO.ENTITLEMENT_VALUEKEY = 6123 and eo.rank in (1,2,3)

If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

rushikeshvartak
All-Star
All-Star
  • Use saviynt api to remove entitlement owners. 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

dgandhi
All-Star
All-Star

Try delete:

dgandhi_0-1721061203184.png

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.