Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

"EnttoAcct" mapping in ImportAccountEntJSON

Saviynt_Savvy
Regular Contributor II
Regular Contributor II

Could someone please explain the "EnttoAcct" and "acctToEnt" mappings in detail.

In the below link I see that
"EnttoAcct" mapping is done for the "Group" entitlement type.
"acctToEnt" mapping is done for the "Role" entitlement type.

https://docs.saviyntcloud.com/bundle/REST-v24x/page/Content/Examples-for-JSON-Construction.htm#Impor...

In the "Group" membership, the attribute "${id}" is used to iterate over each Entitlement value.
But where from this "${id}" value will be taken?

I see the URL in the "Sample Response" and the url in the "acctEntParams" is different in the below "Developer Handbook" link. (ImportAccountEntJSON --> ProcessingTypes section - section 2)
https://docs.saviyntcloud.com/bundle/Dev-Handbook-REST-v24x/page/Content/Developers-Handbook.htm#imp...

My sample response for "GET USERS FROM GROUP" API call is as below :

Saviynt_Savvy_0-1727164039761.png
How should I mention the "URL" in the "acctEntParams" section of the "ImportAccountEntJSON" ?

Thanks & Regards,
SaviyntSavvy

5 REPLIES 5

NM
Honored Contributor II
Honored Contributor II

Hi @Saviynt_Savvy if to get the mapping between account and entitlement and for that you have to call api for each and every group use httpenttoact otherwise httpAccttoEnt

ID is account id or entitlement id in account param or entitlement param.

 

In your case use httpenttoact as you are calling api for each and every group to get the mapping details of account.

In acctentparam listfield = values.

Saviynt_Savvy
Regular Contributor II
Regular Contributor II

Hello @NM , @Amit_Malik 
Thank you for the explanation. 
But, could you please give how the URL should be in my "acctEntParams" section for the "EnttoAcct" mapping.
I have provided the screenshot of my API call and its POSTMAN response.

Thanks & Regards,
SaviyntSavvy

NM
Honored Contributor II
Honored Contributor II

@Saviynt_Savvy where you have to pass group Id just add ${id} everything else in url remains the same 

groupid=${id}

groupId=${id}

Kind Regards,
Amit Malik
If this helped you move forward, please click on the "Kudos" button.
If this answers your query, please select "Accept As Solution".

Amit_Malik
Valued Contributor II
Valued Contributor II

EnttoAcct processing type is used when you need to iterate through entitlement ID and get account associations. When application / target has a API which gives association using a new url and the new url needs entitlement ID to be passed.

acctToEnt is similar to EnttoAcct, difference is that now target has a API which will give account to entitlement association via passing account ID in new url.

 

The usage of acctToEnt or EnttoAcct depends on target APIs, if they have a API where entitlement ID to be passed to get associations then  EnttoAcct and other way around for acctToEnt .

 

Kind Regards,
Amit Malik
If this helped you move forward, please click on the "Kudos" button.
If this answers your query, please select "Accept As Solution".