Technical Rules for Birthright assignment of Enterprise Roles not getting triggered

[varunpuri]

Hi,

We have created 2 types of Technical Rules :
1. For AD Account creation
2. For assignment of Enterprise Roles. Those enterprise roles are further associated with AD Groups.

When we Create a new user, we see that the Technical Rules for AD Account creation get triggered and create tasks of type Create Account on AD.

But, the technical rules for assigning Enterprise Roles are not triggered at all. Thus, no task of type Add Access gets generated for assigning the AD groups associated with Enterprise Role to the user.

Kindly assist.

[sk]

From your statement I understand that you have two Rules 1. for AD account creation 2. For assigning enterprise roles.

1. If so, Condition/trigger point for both rules is same or different?
2. On user history tab do you see both rules are getting trigger or not?

[varunpuri]

@sk : The conditions are slightly different but the attributes of user which we are importing matches both the conditions.

Also, we have seen that User History tab is only showing details of User Update Rules and not Technical Rules.

[varunpuri]

Additionally, the logs also show that Saviynt has picked up the Rule for execution.

Is there an explicit configuration using which we need to ensure that evaluation of rule Birthright_AD_ALL_ALL_GR always succeeds evaluation for rule Create Birthright Application Account ?

[sk]

Can you share the screenshot of rule condition and action?

[varunpuri]

@sk  - please find the snapshot below :

[sk]

Can you please share the screenshot of other rule you created for AD.

Also I hope you are running Job DetectiveProvisioningRulesJob 

[varunpuri · Accepted solution]

@sk : I was able to fix it. The problem was here -

I changed it to - 

After this, the Add Access tasks started appearing in the Pending Tasks section.

Thank You for your assistance.

[rushikeshvartak]

Request option for Entitlement Type should None (create task)