From the docs regarding technical rules and forum posts, it seems like a technical rule and its advanced queries can only access the users table.
We have a requirement to assign an enterprise role (containing application entitlements) to a user only when they have an active account in an application, as imported via account recon jobs. We have three applications for whom we need to assign enterprise roles and we cannot directly provision new accounts in the applications, only assign entitlements.
Is seems we would need to set a user custompropertyX, Y and Z (one for each application) with a value such as "HasAppXAccount" and use the user custompropertyX, Y or Z in the technical rule. ie If User.custompropertyX equals "HasAppXAccount", assign AppX Enterprise Role.
Is there a better method to assign enterprise roles if a user has an existing active account in an endpoint?
Also how would you maintain the user custompropertyX,Y and Z values over time?
We have been looking at using the "Saviynt For Saviynt" DB connection somehow, but are struggling to find a working configuration.
Any advice on how best to build a solution for the requirement?
