To assign the Azure AD Group owners to the Azure AD groups when we reconcile to Saviynt

[kumarv]

To assign the Azure AD Group owners to the Azure AD groups (Entitlements) when we reconcile to Saviynt.

Please let us know how it can be done by assigning the owners to the entitlements (AAD Groups) when we reconcile from Azure AD to Saviynt using the Azure AD connector.

[AmitM · Accepted solution]

HI @kumarv , the Azure AD OOTB connector will do it. Nothing to be configured specifically by you if you are following this page - https://docs.saviyntcloud.com/bundle/AzureAD-v23x/page/Content/Configuring-the-Integration-for-Accou...

Below section in ENTITLEMENT_ATTRIBUTE does it but even if I remove the groupowner part. The connector still gets the owners.

"AADGroup": {
      "colsToPropsMap": {
        "entitlementID": "id~#~char",
        "entitlement_value": "displayName~#~char",
        "customproperty1": "deletedDateTime~#~char",
        "customproperty2": "description~#~char",
        "customproperty5": "onPremisesSyncEnabled~#~char",
        "customproperty6": "onPremisesLastSyncDateTime~#~char",
        "customproperty7": "mail~#~char",
        "customproperty8": "mailEnabled~#~char",
        "customproperty9": "onPremisesSecurityIdentifier~#~char",
        "customproperty10": "securityEnabled~#~char",
        "customproperty11": "groupTypes~#~listAsString",
        "customproperty12": "membershipRule~#~char",
        "customproperty13": "membershipRuleProcessingState~#~char",
        "customproperty16": "resourceProvisioningOptions~#~char"
      }
    },
    "AADGroupOwners": {
      "colsToPropsMap": {
        "entitlementID": "id~#~char",
        "entitlement_value": "displayName~#~char"
      }

If you are not seeing owners even after following this , just check if those owners have account reconciled and account linked with user record.

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.