Team,
We have existing Saviynt for Saviynt Database connection for managing Sav Roles which we are trying to extend to manage UserGroup as well.
As part of it we were successfully able to configure Account/Entitlement import JSONs and able to bring UserGroups in to Saviynt Endpoint as entitlement. Now when we try to provision a user as a member of usergroup we observed that it is adding the user as an owner of usergroup instead of member of usergroup.
And the same logic is working fine in another environment which is on v2020.1.2.
GRANTACCESSJSON:
{
"UserGroup": ["Insert into usergroup_users(userkey,user_groupkey,updatedate,updateuser) values(${user.id},(select USERGROUPKEY from user_groups where USER_GROUPNAME='${task.entitlement_valueKey.entitlement_value}'),utc_timestamp(),(select userkey from users where username = 'admin'))"],
"SAVRole": ["Insert into user_savroles(USERKEY, ROLEKEY,UPDATEDATE,UPDATEUSER) VALUES (${user.id},(select rolekey from savroles where rolename= '${task.entitlement_valueKey.entitlement_value}'),utc_timestamp(),(select userkey from users where username = 'admin'))"]
}
"UserGroup": ["Insert into usergroup_users(userkey,user_groupkey,updatedate,updateuser) values(${user.id},(select USERGROUPKEY from user_groups where USER_GROUPNAME='${task.entitlement_valueKey.entitlement_value}'),utc_timestamp(),(select userkey from users where username = 'admin'))"],
"SAVRole": ["Insert into user_savroles(USERKEY, ROLEKEY,UPDATEDATE,UPDATEUSER) VALUES (${user.id},(select rolekey from savroles where rolename= '${task.entitlement_valueKey.entitlement_value}'),utc_timestamp(),(select userkey from users where username = 'admin'))"]
}
Below is request details:
UserGroup Owner Tab:
UserGroup Users Tab:
If you look at GrantAccessJSON we are inserting the user in usergroup_users table which is supposed to add the user as a member of usergroup instead it is adding as owner of usergroup which actually comes from table: usergroup_owners as per database schema document: https://docs.saviyntcloud.com/bundle/EIC-Database-Schema-Reference/page/Content/Database-Schema-Refe...
We have opened a FD ticket for the same: https://saviynt.freshdesk.com/support/tickets/1666219 but we were redirected to open a Forum question and stated that Product team here can help us identifty if it is a product bug or not.
So hoping that someone from product team here will help us to identify if this is a bug or implementation issue.
