01/24/2023 06:18 AM
We have created 2 types of Technical Rules :
1. For AD Account creation
2. For assignment of Enterprise Roles. Those enterprise roles are further associated with AD Groups.
When we Create a new user, we see that the Technical Rules for AD Account creation get triggered and create tasks of type Create Account on AD.
But, the technical rules for assigning Enterprise Roles are not triggered at all. Thus, no task of type Add Access gets generated for assigning the AD groups associated with Enterprise Role to the user.
Solved! Go to Solution.
01/24/2023 06:28 AM
From your statement I understand that you have two Rules 1. for AD account creation 2. For assigning enterprise roles.
01/24/2023 06:39 AM
@sk : The conditions are slightly different but the attributes of user which we are importing matches both the conditions.
Also, we have seen that User History tab is only showing details of User Update Rules and not Technical Rules.
01/24/2023 06:48 AM
Additionally, the logs also show that Saviynt has picked up the Rule for execution.
Is there an explicit configuration using which we need to ensure that evaluation of rule Birthright_AD_ALL_ALL_GR always succeeds evaluation for rule Create Birthright Application Account ?
01/24/2023 08:32 AM
01/24/2023 11:26 AM
01/24/2023 11:43 AM
Can you please share the screenshot of other rule you created for AD.
Also I hope you are running Job DetectiveProvisioningRulesJob
01/24/2023 12:01 PM
@sk : I was able to fix it. The problem was here -
I changed it to -
After this, the Add Access tasks started appearing in the Pending Tasks section.
Thank You for your assistance.
01/24/2023 12:27 PM