Account reconciliation

[Ekata]

Hi Team,

We have a use case where the Azure AD groups are having some eligible members (PAM) in target side, and we want to see those users account under the Saviynt entitlements for Azure AD.

The normal accounts are getting synced, but those accounts are not visible under Saviynt. 

Do we have any option to enable so that those members can be pulled into Saviynt for certification purpose. If those are not pulled the cert will be of no use for business.

Thanks,

Ekata

[sk]

@Ekata : Missing accounts are in different OU? Also can you check your Azure AD connection settings to see if there is any ACCOUNTS_FILTER applied

[Ekata]

Hi @sk the accounts are from different OUs, not to any specific OU. Also I checked the ACCOUNTS_FILTER and it is Null. No value or filter added in.

Do we need any specific access from target side to make the account visible for Saviynt?

[sk]

@Ekata : Are you able to see any other accounts from those OUs where you are missing privileged accounts? If not then I would suggest to check if service account has permissions to read the data from respective OUs.