How to Assign an Entitlement to Account through upload Account using File based import

[sukoor]

HI,

I am trying to assign an entitlement to Account using File Based Import, but while uploading the csv file in Accounts and previewing, it was asking entitlement type creation.Not getting Entitlement value option in drop down as shown below.

And also when tried with Schema based import its not accepting the | and \ symbols

Could you please check and let me know is there any option to assign the entitlement to Accounts through Upload File based or  schema based Import.

Please find the csv file attached.

Regards

Abdul Sukoor

[rushikeshvartak]

There is a bug in v23.8 with entitlement/entitlement type mapping while account uploading, which was fixed in v23.10. Until then, you may have to use alternate approach of Uploading-Accounts-and-associated-Entitlements-using-Schema-Upload

We faced the same issue in v23.8 and last time it was working for us is v23.4, So somewhere, this bug got introduced and we got confirmation that it was fixed in v23.10 and same has been validated successfully after v23.10 upgrade

Refer : https://forums.saviynt.com/t5/identity-governance/uploading-account-along-with-entitlement-associate...

[sukoor]

Ok let me try alternate approach of Uploading-Accounts-and-associated-Entitlements-using-Schema-Upload and update you.

Thanks

Abdul Sukoor

[sukoor]

Hi Rushikeshvartak,

I tried with Uploading-Accounts-and-associated-Entitlements-using-Schema-Upload .

I am using Tab as separator because my entitlement consists of comma in it.So I am not using comma as separator

Uploaded the Sav and Csv files in Sav and data files.Ran the Job but getting 'SAV file column count is greater or less than csv file column count' error, but columns are same in both files.

Attaching csv file and below are Sav file details ,please check and suggest

Sav file details

SystemName=CRB_AD_DEV
FileNameStartswith=SAPAccountsimport1
DELETEACCOUNTENTITLEMENT=NO
ACCOUNT_NOT_IN_FILE_ACTION=NOACTION
ENT_VAL_NOT_AVAILABLE=NOACTION
ENTITLEMENT_TYPE=Groups
IGNOREFIRSTLINE=True
FILEIMPORTDELIMETER=
OVERWRITE_USER_ASSIGNED=FALSE
ACCOUNTNAME ENDPOINTNAME status Groups OWNERTYPE OPERATION

Thanks

Abdul Sukoor

[SumathiSomala]

@sukoor Open the csv file in notepad before uploading.

I can see these is no tab space between ACCOUNTNAME ENDPOINTNAME columns

[sukoor]

HI Sumathi,

My apologies Tab is not a separator for csv file in Uploading-Accounts-and-associated-Entitlements-using-Schema-Upload .Only |, \ and comma are the separators.

Now i am using the | as separator ,its saying as job is successful but still not able to assign the entitlement and also in entitlement value insert it is showing as 0. Please find the SAV file ,Data file and Job log screen shot.

Please check and suggest

Sav file

SystemName=CRB_AD_DEV
FileNameStartswith=SAPAccountsimportstest
DELETEACCOUNTENTITLEMENT=NO
ACCOUNT_NOT_IN_FILE_ACTION=NOACTION
ENT_VAL_NOT_AVAILABLE=NOACTION
ENTITLEMENT_TYPE=Groups
IGNOREFIRSTLINE=True
FILEIMPORTDELIMETER=|
OVERWRITE_USER_ASSIGNED=FALSE
ACCOUNTNAME,ENDPOINTNAME,status,Groups,OWNERTYPE

Job log:

Thanks

Abdul

[SumathiSomala]

@sukoor Did you follow the naming convention for files being uploaded?

Example: ADAccounts.SAV, UNIXAccounts.SAV, and SAPAccounts.SAV.

For example, if you specify Account for this property, then the CSV file name can be: Account1.csv, Account_Import.csv, Account_Import_2.csv, or any file name that starts with Account and has a .csv extension.

Rename the filenames to below and try

SAPAccounts.sav
Account_SAP.csv

also change below config in sav file

 FileNameStartswith=Account_SAP

[sukoor]

Hi Sumathi,

I have made the changes as suggested, but still same as shown in below screen shot.

Job is showing as success, but no entitlement assigned to Account

Sav File name  :  SAPAccounts.sav

Sav file details below

SystemName=CRB_AD_DEV
FileNameStartswith=Account_SAP
DELETEACCOUNTENTITLEMENT=NO
ACCOUNT_NOT_IN_FILE_ACTION=NOACTION
ENT_VAL_NOT_AVAILABLE=NOACTION
ENTITLEMENT_TYPE=Groups
IGNOREFIRSTLINE=True
FILEIMPORTDELIMETER=|
OVERWRITE_USER_ASSIGNED=FALSE
ACCOUNTNAME,ENDPOINTNAME,status,Groups,OWNERTYPE

[SumathiSomala]

@sukoor  Can you please add OPERATION column and try for owner add/edit/delete

OPERATION

Specify whether you want to add an owner (add), edit an owner (edit), or delete an owner (delete). Based on the operation specified (add, edit, or delete) owners are added, modified, or deleted from the account ownership.

Also share the logs

[sukoor]

Hi Sumathi,

Please the details below , Logs also attached.

Job is showing as success, but no entitlement assigned to Account

Sav File name  :  SAPAccounts.sav

Sav file details below

SystemName=CRB_AD_DEV
FileNameStartswith=Account_SAP
DELETEACCOUNTENTITLEMENT=NO
ACCOUNT_NOT_IN_FILE_ACTION=NOACTION
ENT_VAL_NOT_AVAILABLE=NOACTION
ENTITLEMENT_TYPE=Groups
IGNOREFIRSTLINE=True
FILEIMPORTDELIMETER=|
OVERWRITE_USER_ASSIGNED=FALSE
ACCOUNTNAME,ENDPOINTNAME,status,Groups,OWNERTYPE,OPERATION

[SumathiSomala]

@sukoor Try by keeping entitlement value in double quotes

Also can you confirm entitlements and entitlement types availble or not in system

[sukoor]

Hi Sumathi,

As suggested made the changes, still same.Please find the logs attached

Entitlement type = Groups

Entitlement value =CN=SAP_BI_DELETE,OU=Security Groups,OU=Global BOE,OU=GroupsForTrusts,DC=crb,DC=devmaersk,DC=com

Thanks

Abdul Sukoor

[SumathiSomala · Accepted solution]

@sukoor Try below

ENTITLEMENT_TYPE=memberOf

Also replace groups with memberOf wherever it required.

[sukoor]

Thank you Sumathi and Rushikeshvartak.

Now I am able to add the Entitlement to Accounts.