Privilege entitlement in hierarchy

[iam01]

Can anyone please help to understand when to use "USER BASED" privilege entitlement?

also please correct my understanding with "Entitlement based": 

entitlement based privilege attribute is used to dynamically get the value from user at the time of Access request through ARS screen. Is there any other am missing here?

In accounts entitlement hierarchy how i can dispaly this value?

[Dhruv_S]

Hi @iam01 

Thanks for posting your question. Please check the section "Updating Entitlement Type" in the following article. Details about Privileges is there right after the table.

Viewing or Updating Endpoints (saviyntcloud.com)

Also refer below post where more details are mentioned.

Solved: Use of Privileges in Entitlement Type - Saviynt Forums - 36740

Regards,

Dhruv Sharma

[iam01]

@Dhruv_S the attached doc or forum link doesn't answer my questions.

Nothing much I can find for use-based entitlement privileges.

And I have used entitlement based privileges attribute for rest connector and it's not showing up on hierarchy screen and no document on this as well

[rushikeshvartak]

Refer https://forums.saviynt.com/t5/application-access-governance/privileges-selection-not-working/m-p/984...

[iam01]

@rushikeshvartak  I don't see any solution on the above forum link.

All I need to know is when to use "USER BASED" privilege entitlement?

Kindly please provide any information you have. 

[rushikeshvartak]

If Privelege information not coming from target in this case you can setup USER BASED Privilege Entitlement

[iam01]

Got it, thanks.

So, if the privilege info is coming from target then we have to use entitlement based correct?

In rest connector documentation I could not find json mapping for privilege entitlement. Could you please share if any doc on how to do the mapping.

[rushikeshvartak]

Check developer handbook and search MappingType - ENT2

[iam01]

Thanks, both user based and entitlement based will give me that green box under entitlement hirearcy right?