Map entitlement owners for AD Groups through SAV4SAV REST

[ShubhamBabbar]

We want to map AD group owners, the default configuration on the connector has a limitation because the DN (marked as group owner) is not being imported inside Saviynt as accounts under the same endpoint.

We have tried to implement a workaround through SAV4SAV Rest entitlement import, to update the entitlement owners. the owners get updated but the existing account to entitlement mapping is lost.

We have the below STATUS_THRESHOLD_CONFIG:

{
"statusAndThresholdConfig": {
"deleteLinks": false,
"correlateInactiveAccounts": false,
"inactivateAccountsNotInFile": false,
"deleteAccEntForActiveAccounts": false
}
}

Attaching Entitlement Import JSON

[rushikeshvartak]

• This is becuase of acctEntParams parameters.
• You should use OOTB AD connector and pull DN in account instead of sav4sav

[ShubhamBabbar]

Hi @rushikeshvartak  Thanks for your response, but pulling DN in account is not helpful as there is a segregation required between Privileged AD group and non-privileged AD groups (We have created 2 different endpoints). 
In our case the a non-privileged DN can be an owner of a privileged AD group, hence the problem where the non-privileged account would not exist and the owner would not map. 

[NM]

@ShubhamBabbar store owner dn in entitlement custom property and have enhanced query to map the account owner based on the present DN 

[ShubhamBabbar]

@NM  Thanks for your response, but "entitlement_owners" is a restricted table for enhanced query job.