Click HERE to see how Saviynt Intelligence is transforming the industry. |
08/01/2024 11:41 AM
We currently have an entitlement owner certification that has both entitlement and access verification of all users (does not include orphan accounts) with access to the entitlements.
In Advanced Campaign Configs, we use the Accounts Query to exclude orphan accounts through the following query: status in ('Manually Provisioned','1') and accountkey in (select accountkey from user_accounts) - this works as expected on the access verification step of the cert.
In the Entitlements Query we exclude entitlements that do not have accounts in them: entitlement_valuekey in (select entitlement_valuekey from account_entitlements1)
However, this query is only checking on accounts, so the output is that in the Entitlement Verification step the certifier can still see the entitlements that have an orphan account in them but the count shows 0.
How can we exclude these entitlements that only have orphan accounts and do not have users from the Entitlement Verification step the campaign?
08/01/2024 11:48 AM
Share logs when you preview/launch campaign
08/02/2024 08:42 AM
08/02/2024 05:01 PM
Validated this in 24.4 and its working as expected
08/05/2024 06:19 AM
Hi Rushikesh - this is not working, in your first screenshot I can see the entitlement with zero accounts - this should not be showing in Step 1, Ownership Verification, if there are zero accounts. That is my question, how do I get those entitlements not to show in Step 1 when there are only Orphan accounts there - we don't want the certifier to see those entitlements in Step 1 or 2 if there are no Users with the entitlement.
08/05/2024 06:52 PM - edited 08/05/2024 09:40 PM
Yes its not working use below workaround
SELECT
ev.ENTITLEMENT_VALUEKEY as entitlement_values__primarykey,
'Entitlement With Accounts' as entitlement_values__customproperty1
FROM entitlement_values ev
INNER JOIN account_entitlements1 ae
ON ev.ENTITLEMENT_VALUEKEY = ae.ENTITLEMENT_VALUEKEY
INNER JOIN accounts a
ON ae.ACCOUNTKEY = a.ACCOUNTKEY
INNER JOIN endpoints e
ON a.ENDPOINTKEY = e.ENDPOINTKEY
WHERE e.ENDPOINTNAME = 'ABCD'
AND a.STATUS IN (1, 'Active');
08/05/2024 07:35 PM
You can achieve this use case using below:
1. Identity all the entitlement which doesn't have any account using analytics query. Below for your reference, this should only list entitlement with active accounts.
2. Once the entitlement are identified, use one CP and add something like WithAccounts for entitlements having accounts
WithoutAccounts for entitlement without accounts.
3. Launch EO campaign, below query
The campaign will list only those entitlement with accounts
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.