Relation between Entitlement type role and Entitlement

[narendranegi]

Hi

When we create AAD group from Create AAD Group functionality.

It creates Role of type entitlement and entitlement (after task completion).

Can anyone please tell me relation between role and create entitlement in database? or sql query to identify entitlement create from Saviynt and entitlement directly created in target?

Regards

[naveenss · Accepted solution]

Hi @narendranegi ,

AAD groups created from Saviynt will be created as a role of type "Entitlement" (in DB roles table the ROLETYPE value for such roles will be 6). Please use the below sql query to identify such roles.

select role_name,status,roletype from roles where roletype=6;

[rushikeshvartak · Accepted solution]

• Saviynt use role management module for Azure AD Group management
• When you raise create AAD Group request below process is done in saviynt
  • Role with Role Type Entitlement gets created
    • Role Type  - Entitlement 
    • Endpoint - Azure AD
  • Once WSRETRY is ran
  • Entitlement gets created with same name as role name under AADGroup Entitlement type of AD 
  • Groups gets created in Azure

Query to get role information:

select role_name,roletype,endpoint from roles where status=1 and roletype=6