Account Config not getting updated using Enhanced Query

[AS5278]

Hi,

We are trying to update the account config for PAM accounts using the Enhanced Query Execution feature of Saviynt. 

We have used the query in below format:

SELECT
'{"defaultrequestabletimeforidinsecs":"86400","defaultrequestabletimeinsecs":"86400","maxrequestabletimeinsecs":"172800","diffbetweenrequests":"","authenticationType":"","maxrequestabletimeforidinsecs":"172800","Saviynt-Status":{"pamState":"ENABLED","pamType":"CREDENTIALLESS","errorDetails":"","justInTime":""}}' AS ACCOUNTS__ACCOUNTCONFIG, acc.accountkey as ACCOUNTS__PRIMARYKEY FROM ACCOUNTS acc WHERE acc.name in ('ZBR_CPAM_APAC_AGIS_IS_SUPPORT_1','ZBR_CPAM_APAC_AGIS_IS_SUPPORT_2') and acc.endpointkey=62;

After running the enhanced query job, the PAM Account Config attribute is getting set (with the values as we are providing) for the account. However, the other attributes like 'Maximum Requestable Time For ID (sec)', 'Default Requestable Time for ID (sec)' are not getting set.

Also, for each attribute we used in the Account Config JSON in the enhanced query, Saviynt is creating and additional attribute..like....defaultrequestabletimeforidinsecs.Default.Label..etc.

See below:

Also. In data analyzer we can see that the account config is properly set. But for the attributes inside the account config value is not getting set in Saviynt.

We are unable to figure out what might be causing the issue as the Enhanced Query is properly doing its job..it is setting the Account Config JSON value. But using the JSON, the attribute values are not getting updated in Saviynt.  This was working perfectly fine using CustomQueryJob earlier.

Please advice.

Thanks,

Atul Singh

[sk]

@AS5278 : Did you use Enhanced Query Execution Job to do this with below query? Why I am asking this is because as far as I know this job doesn't support keyword UPDATE. Instead you have to prepare a select query to update any columns. Can you clarify on this?

Update accounts set ACCOUNTCONFIG='{"defaultrequestabletimeforidinsecs":"86400","defaultrequestabletimeinsecs":"86400","maxrequestabletimeinsecs":"172800","diffbetweenrequests":"","authenticationType":"","maxrequestabletimeforidinsecs":"172800","Saviynt-Status":{"pamState":"ENABLED","pamType":"CREDENTIALLESS","errorDetails":"","justInTime":""}}' where name in ('APAC_AGIS_1','APAC_AGIS_2');

For example see below

Original Query

update ars_requests set comments = 'comments' where requestkey = 1;

Enhanced Custom Query

select "comments" as ars_requests__comments, requestkey as ars_requests__primaryKey from ars_requests where requestkey = 1;

You can find more details in Saviynt FAQ

[AS5278]

@sk

Sorry, I pasted the query which we were using earlier in Custom Query Job. The query which we are using in Enhanced Query Job is in below format:

SELECT
'{"defaultrequestabletimeforidinsecs":"86400","defaultrequestabletimeinsecs":"86400","maxrequestabletimeinsecs":"172800","diffbetweenrequests":"","authenticationType":"","maxrequestabletimeforidinsecs":"172800","Saviynt-Status":{"pamState":"ENABLED","pamType":"CREDENTIALLESS","errorDetails":"","justInTime":""}}' AS ACCOUNTS__ACCOUNTCONFIG, acc.accountkey as ACCOUNTS__PRIMARYKEY FROM ACCOUNTS acc WHERE acc.name in ('ZBR_CPAM_APAC_AGIS_IS_SUPPORT_1','ZBR_CPAM_APAC_AGIS_IS_SUPPORT_2') and acc.endpointkey=62;

I have edited the post with correct query we are using.