Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

No Action Required Task for Child Entitlement

sabthamis
New Contributor
New Contributor

Hello All,

We have configured Parent Child Entitlement for AD using Endpoint Filter. We have SOD rules to detect the violation and when we remediate the violation 2 task are created of type remove access for Parent and Child entitlement. This is working as expected. 

The Child entitlement is also removed after the provisioning Job. The Parent Entitlement task is moved to completed state and the child entitlement task is pending with error as below. When I run the provisioing Job this task for child entitlement is also moved to completed with state as "No action Required".

Error while DELETE operation for account-txxxxdev to Group-CN=xx-xxx,OU=testapp,OU=dev,DC=test,DC=com in AD - txxxxdev not found in LDAP/AD

 

We are on 23.8. Is this expected behaviour or a defect 

Regards,

Sabthami Subramanian

2 REPLIES 2

CR
Regular Contributor III
Regular Contributor III

account-txxxxdev to Group-CN=xx-xxx,OU=testapp,OU=dev,DC=test,DC=com --account not a part respective group , can you check in AD once again


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

rushikeshvartak
All-Star
All-Star

SOD is defined on parent ent or child ent?


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.