Revoke existing entitlements if an entitlement is inactive

[meghna_alias]

When the entitlement value is deleted from target application , it is inactivated in Saviynt. Is there way to call revoke all the accesses given to the entitlement if inactivated?

[NM]

@meghna_alias if account and entitlement mapping is still present you can use analytics for that.

[meghna_alias]

In our case , the account entitlement mapping is deleted in the next sync job , but the task is not created for the same thus the target system is not updated.

[NM]

@meghna_alias saviynt won't automatically create a task as the entitlement is now inactive at Target end.

[NM]

@meghna_alias 

Workaround 

1) ask application team to activate the entitlement pull all the entitlement and account mapping create task for all the account having entitlement

2) get a list of users from application team and then create task from saviynt for those account.

2 nd option still have to manually add the mapping.

If you found the solution helpful was give kudos and accept the solution 

Thanks.

[meghna_alias]

@NM In accounts , we have delete links to delete all associated entitlements.Do we have anything such configuration to delete existing entitlements if inactivateentitlementsNotInfeed set to true?

[NM]

@you can't actually delete an entitlement if they are not in feed they will become inactive.

Keeping delete links as flase too you can give a try for mapping.

[NM]

@meghna_alias is the issue resolved as per the latest suggestion?

[rushikeshvartak]

Yes thats correct there are 2 configurations refer below post

https://forums.saviynt.com/t5/identity-governance/rest-connector-all-entitlements-inactivated-in-sav...