We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Exchange Online Recertification

SBUK
New Contributor III
New Contributor III

Hi all,

Would Saviynt be able to support the recertification of Exchange resources, namely:

  1. Distribution Groups
  2. Resource Mailboxes
  3. M365 Groups

Thanks

4 REPLIES 4

prasannta
Saviynt Employee
Saviynt Employee

Hi @SBUK,

If you are planning to store these exchange resources as entitlements in Saviynt, then yes you can do periodic access review on those. Let me know if this answers your question.

Thanks

SBUK
New Contributor III
New Contributor III

I guess the question is, how?  Where would the recertifier information come from?

DL owners?
M365 Group Owners?
Resource Mailbox... managers?
Would it also be possible to retrieve resource mailbox access, and start a review of that?

 

timchengappa
Saviynt Employee
Saviynt Employee

Hello @SBUK 

2 options that I can think of...

1) Adding owners for each entitlement via UI(the easiest approach)...
a) Adding owners one at a time as seen below...
Screen Shot 2023-03-15 at 11.18.55 AM.png

b) Uploading Owners In Bulk: Please refer to the documentation below...
https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter04-Onboarding-and-Managing-A...

2) Importing entitlement owners directly from Target Applications
Please see JSON samples in the documentation below for the same...
Refer to the "Importing Entitlement Owners" section of the Developers Handbook

Additional Doc reference regarding, Configuring Settings for Entitlement Owner Campaigns...
https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter06-Configuring-SSM/Configuri...

SBUK
New Contributor III
New Contributor III

Thanks for the detailed reply.

Adding owners manually may be easy, for 1, but for 10os/1000s that would be a mad task to undertake.

Uploading from another source in bulk would also be inefficient for mantenance.

Will have to see what the Azure/365 connector can do I guess.