Import Sys_Critical and Privileged values into Saviynt

[smadabh]

We are looking to import values for sys_critical and privileged attributes for the entitlements in Saviynt from Active Directory.

We've mapped them to the extensionAttributes in AD in the groupImportMapping in the Connector. 

Upon running the access import, we are seeing the following error: Column 'SYS_CRITICAL' specified twice

Any solutions on how to work around this?

Here is the group Import mapping -

{
	"importGroupHierarchy": "true",
	"entitlementTypeName": "memberOf",
	"performGroupAccountLinking": "true",
	"incrementalTimeField": "whenChanged",
	"groupObjectClass": "(objectclass=group)",
	"mapping": "entitlement_glossary:description_char,entitlement_value:distinguishedName_char,entitlementid:objectGUID_Binary,lastscandate:whenCreated_date,displayname:cn_char,memberHash:member_char,updatedate:whenChanged_date,customProperty1:sAMAccountType_char,customProperty2:instanceType_char,customProperty4:groupType_char,customProperty9:name_char,customProperty10:objectCategory_char,customProperty11:sAMAccountName_char,customProperty12:distinguishedName_char,customProperty13:cn_char,customProperty14:objectClass_char,customProperty15:managedBy_char,customProperty19:objectGUID_Binary,customProperty22:objectSid_Binary,customProperty21:info_char,customProperty5:languageCode_char,customProperty6:language_char,privileged:extensionAttribute1_num,sys_critical:extensionAttribute2_num,customproperty27:extensionAttribute1_num,customproperty29:extensionAttribute2_num,RECONCILATION_FIELD::customProperty19",
	"activeGroupPossibleValues": [
		"Active",
		"a",
		"l",
		"TRUE"
	]
}

[prasannta]

Hi @smadabh 

Can you confirm if the value for privileged is getting set correctly? Also can you try setting syscritical  instead of sys_critical?

Thanks

[smadabh]

Yes, the value for privileged is getting set correctly. 
I did try syscritical instead of sys_crticial. It says Unknown column 'syscritical' in 'field list'.

[prasannta]

Hi @smadabh 

Can you provide sample values that is set for extensionAttribute2_num?  

Thanks

[smadabh]

The numbers 1 to 5 are assigned. Which get translated to Very low, low, medium, high, very high in Saviynt. 

Also, I am able to import the extensionAttribute2 value to a custom property(29) but just not this attribute.

[smadabh]

Hi, Any update on this issue? We are still waiting on a solution. 

[rushikeshvartak]

This is not supported we tried for sox_critical in azure

[smadabh]

Okay, any solution on how we can bring in the sys_critical value into the field in Saviynt?

[rushikeshvartak]

Store into customproperty and populate in sys critical using sav4sav

[smadabh]

Any document or forum references on how to accomplish this?

[rushikeshvartak]

use saviynt rest connector https://docs.saviyntcloud.com/bundle/Saviynt-REST-based-Guide/page/Content/Understanding-Integration... 

API Link : https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#8b3704d4-7c3d-45e9-a82f-48773... 

[prasannta]

Hi @smadabh 

Please refer the below guide to configure savtosav connector.

https://docs.saviyntcloud.com/bundle/Saviynt-REST-based-Guide/page/Content/Understanding-Integration...

Thanks

[smadabh]

Thank you for the links @rushikeshvartak , @prasannta 

I started testing the modification of syscritical in postman using the API linked below. 

The values are already being imported from Active Directory endpoint into Saviynt to customproperty29 of the entitlements. 

What formatting can I use to update the syscritical attribute of the entitlement to be whatever is in customproperty29?

API - https://documenter.getpostman.com/view/1797923/RWaLwo21?version=latest#e6ae8c9d-5056-47d3-9630-a1257...

This is the body call -

{

  "endpoint":"MDC9292-Try5",

  "entitlementtype":"memberOf",

  "entitlement_value":"CN=AG_Test_EIC_grp,OU=ApplicationGroups,OU=AllGroups,DC=mdc9292,DC=com",

  "status":1,

  "syscritical": <need solution here>

}

[rushikeshvartak]

Yes you can move number 1 to 5 to syscritical