Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Privilege entitlement in hierarchy

iam01
Regular Contributor
Regular Contributor

Can anyone please help to understand when to use "USER BASED" privilege entitlement?

also please correct my understanding with "Entitlement based": 

entitlement based privilege attribute is used to dynamically get the value from user at the time of Access request through ARS screen. Is there any other am missing here?

In accounts entitlement hierarchy how i can dispaly this value?

8 REPLIES 8

Dhruv_S
Saviynt Employee
Saviynt Employee

Hi @iam01 

Thanks for posting your question. Please check the section "Updating Entitlement Type" in the following article. Details about Privileges is there right after the table.

Viewing or Updating Endpoints (saviyntcloud.com)

Also refer below post where more details are mentioned.

Solved: Use of Privileges in Entitlement Type - Saviynt Forums - 36740

Regards,

Dhruv Sharma

iam01
Regular Contributor
Regular Contributor

@Dhruv_S the attached doc or forum link doesn't answer my questions.

Nothing much I can find for use-based entitlement privileges.

 

And I have used entitlement based privileges attribute for rest connector and it's not showing up on hierarchy screen and no document on this as well

rushikeshvartak
All-Star
All-Star

Refer https://forums.saviynt.com/t5/application-access-governance/privileges-selection-not-working/m-p/984...


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

iam01
Regular Contributor
Regular Contributor

@rushikeshvartak  I don't see any solution on the above forum link.

All I need to know is when to use "USER BASED" privilege entitlement?

 

Kindly please provide any information you have. 

 

If Privelege information not coming from target in this case you can setup USER BASED Privilege Entitlement


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Got it, thanks.

So, if the privilege info is coming from target then we have to use entitlement based correct?

In rest connector documentation I could not find json mapping for privilege entitlement. Could you please share if any doc on how to do the mapping.

Check developer handbook and search MappingType - ENT2


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

iam01
Regular Contributor
Regular Contributor

Thanks, both user based and entitlement based will give me that green box under entitlement hirearcy right?