Excluding 1 Entitlement from Job

[SanketBhandhari]

Hi All,

We are having few SAP applications integrated in our environment.

We want to exclude one entitlement named PUBLIC while removing access as this is generic entitlement and cannot be removed and resulting in error every time.

insufficient privilege:  Error while removing access - PUBLIC to account 

How this can be achieved?

Regards,

Sanket Bhandhari

[DixshantValecha]

Hi @SanketBhandhari,

We are checking on your request and we will keep you posted.

[DixshantValecha]

Hi @SanketBhandhari,

Kindly confirm if  PUBLIC is kind of a tcode or a Sap role.

[SanketBhandhari]

Hi Dixshant.

It is HANA Role.

Regards,

Sanket Bhandhari

[rushikeshvartak]

Which connector is used ? ( complete task using enhanced query before wsretry)

[SanketBhandhari]

We are using HANA connector.

( complete task using enhanced query before wsretry) - How?

[AmitM]

HI Sanket , this depends on how you are removing access ? If users requesting removal then solution could be to exclude the entielement using "Config for Requestable Entitlement in ARS" config in entitlement type.

If you are doing it via rules , then you could write a enhanced query to update arstasks table set status to 3 before wsretry runs for that endpoint. SO you can have a trigger chain job also , first run this update query and then wsretry. It is well documented here - https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter10-Job-Control-Panel/Job-Cat...

Thanks,

Amit

[rushikeshvartak]

we also had hana connector in remove access json we checked 

"${if(task.entitlement_valueKey.customproperty11==null || !(task.entitlement_valueKey.customproperty11.equalsIgnoreCase('DEFAULT'))){\"call revoke_activated_role('\"+task.entitlement_valueKey.entitlement_value+\"','\"+accountName.toUpperCase()+\"')\"} else {'alter user '+accountName+' CLEAR PARAMETER STATEMENT MEMORY LIMIT'}}"],