How to avoid/exclude Birthright Entitlement in User Manager Campaign

[Gopi]

Hi All,

How I can exclude the entitlement/access in the User Manager Campaign that is assigned as a birthright for the User account?

The requirement is that we should not include birthright entitlement in the review.

Regards,

Gopi.

[Amit_Malik]

HI @Gopi ,

use highlighted config while creating campaign.

And use following columns from account_entitlement1 table that stores source of assignment

Hope it helps !!

Br - Amit

Please ACCEPT SOLUTION and hit Kudos if it helped.

[sai_kanumuri]

Hi @Gopi 

Please use the below query under Account Entitlements query in the campaign configuration to exclude the birthright entitlements.

Query - ae1.assignedFromRule is null

https://docs.saviyntcloud.com/bundle/EIC-Admin-v2021x/page/Content/Chapter06-EIC-Configurations/Conf...

[rushikeshvartak]

Query : ASSIGNEDFROMROLE is null AND ASSIGNEDFROMROLES is null

[Darshanjain]

Hi @Gopi 

As Discussed, you need to find the entitlements which are being provisioned from the config entitlements with new account 

Thanks

Darshan 

[Gopi]

Hi @rushikeshvartak , @Amit_Malik , @sai_kanumuri ,

The solution that you provided worked but a few of the entitlements are assigned from the Entitlement With New Account option which is available at Endpoint. 

Is the endpoint table accessible at the campaign?

Regards,

Gopi.

[rushikeshvartak]

entitlement_Valuekey in (select ENTSWITHNEWACCOUNT from endpoints where endpointkey=30)

https://forums.saviynt.com/t5/identity-governance/exclude-entitlement-from-user-manager-campaign/m-p...

[Gopi]

Hi @rushikeshvartak , @Darshanjain @sai_kanumuri @Amit_Malik ,

Thanks for all your input.

Now I have one question, In the User Manager campaign it is possible to display child entitlement at step 2?

I have a few BR entitlement provisions under that BR entitlement there are a few child entitlements also.

The observation I see that

When I launch the campaign(without any adv config just for testing purposes) for the AD endpoint I see only parent entitlement in Step 2 but not the child entitlement. Is it expected behavior?

Please provide some info on this.

Regards,

Gopi.

[rushikeshvartak]

Child Entitlements will not be visible its expected 

Refer https://forums.saviynt.com/t5/community-knowledge-base/display-child-entitlements-in-campaigns/ta-p/...