Does anyone know what the Global Configurations > Rules > For Remove Birthright Task check if Access is Assigned option does? I cannot find any documentation explaining its purpose but it sounds like something that could help us with an issue we are having.
If this config is ON (1), then we will check in account_entitlements1 table if ASSIGNEDFROMRULE is set, and only then remove access tasks will be created for birthright failure. This means that only if the entitlement is provisioned to the target through saviynt because of a rule will revoke tasks get created for birthright failure.
Hope this helps!!