We notice that Saviynt users can Modify Access on an AD Endpoint and see the current group membership (entitlements) while other users that are also part of the same AD groups do not see their current group membership when using the Modify Access option.
Unless I misunderstand something, I think this is cause by the fact that we can see Accounts on the AD child Endpoint Entitlements when accesses are granted from Saviynt ARS while accesses that were granted outside Saviynt (directly in AD from before that applications were integrated) and imported are not showing on the AD child Endpoint Entitlement but only on the parent AD endpoint.
Is there a way to import accounts and/or accesses or something else that can be done to “sync” the parent AD Entitlements accounts with the child ones that get associated to AD Endpoints from the filters on the connection?
Example:
Thank you for the help.
