Need to understand list of action performed when AAD Create Entitlement task runs

[narendranegi]

Hi,

Can anyone please explain, what all action Saviynt performs when running the Create Entitlement task for AAD group?

I have gathered few:

1. Gather the groups GUID in the response.
2. Create Entitlement with it.
3. Remove existing role version.
4. Add Entitlement key to role.

but they are not complete.

Regards

[rushikeshvartak]

• Saviynt uses the role management module for Azure AD Group management
• When you raise an AAD Group request, the below process is done in saviynt
  • Role with Role Type Entitlement gets created
    • Role Type: Entitlement 
    • Endpoint: Azure AD
  • Once WSRETRY is ran
  • Groups gets created in Azure in response, it return Object GUID
  • Entitlement gets created with the same name as the role name under the AADGroup Entitlement type of AD and the entitlement ID received in the previous step.
  • Entitlement valuekey is get populated in roles table to maintain relation between role & entitlement
  • Role status become active and version become active

Query to get role information:

select role_name,roletype,endpoint,ENTITLEMENT_VALUEKEY from roles where status=1 and roletype=6

[narendranegi]

Hi Rushikesh,

Thanks for the reply.

Can you please list the API that we can use to do it manually in Saviynt?

regards

[rushikeshvartak]

Create task API for assignmenttype - ENTITLEMENTS,

https://documenter.getpostman.com/view/23973797/2s9Ykhh4VH#6e3b6163-0e07-46e6-b0d1-f6ac45ec4344