Issue with Onpremises windows Server Onboarding to CPAM

[Pooja]

We are getting below error while bootstrap, in endpoints we see the accounts are imported , but the account permissions are not getting reflecting properly, so the instance is  not getting PAM enabled. how we can fix this issue? Please advice. 

[NageshK]

@Pooja Thanks for posting your question. Here are couple of things to verify:

1. In the endpoint, go to entitlements tab and see if the windows groups have been imported or not
2. Right after the import process, capture the logs of windowsconnectorms and share the same

You can use the advanced logging capabilities to capture the logs specifically from windowsconnectorms. Here is the doc portal link for ref. : 
https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter07-General-Administrator/Man...

The same link is also present in the right side widget of the pam forums board

Thanks

Nagesh K

[Pooja]

Hi @NageshK 

After bootstrap job (Onpremisesdiscovery - externaljartype) we see in endpoint two groups are created in entitlement type and logs error as below

2023-11-07 08:22:23.659 DEBUG [TENANT_ID=DEFAULT] 7 --- [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#1-13] c.s.s.c.s.RepositoryReconServiceImpl : jobSummaryXML :: <filename> Connector MS Job<jobid>30348</jobid><updateDate>1699345333256</updateDate><noOfBatch>2</noOfBatch><id>cb700096-1367-45d9-94ad-38487cdd86b5</id><jobDone>false</jobDone><Error-in-updateRepositaryActual-reconcile>Duplicate key Group (attempted merging values 34 and 35)</Error-in-updateRepositaryActual-reconcile><createDate>1699345333256</createDate></filename>
2023-11-07 08:22:23.662 DEBUG [TENANT_ID=DEFAULT] 7 --- [org.springframework.amqp.rabbit.RabbitListenerEndpointContainer#1-13] c.s.s.c.s.RepositoryReconServiceImpl : Exception in Duplicate key Group (attempted merging values 34 and 35)
2023-11-07 08:23:14.778 DEBUG [TENANT_ID=DEFAULT] 7 --- [http-nio-8980-exec-9] c.s.s.c.controller.ConnectorController : Enter jobStatus

[NageshK]

@Pooja Thanks for sharing the details. There shouldn't be two entitlement types with the same name. Was one of them created manually? 
Please delete the entitlement type that does not have any entitlements associated to it and then retry the bootstrap.

Thanks,

Nagesh K

[Pooja]

Hi @NageshK  - it got created automatically when we run the onprem discovery job (external jar job) while onboaridn the instance from the CSV, for some instance it was fine and for some it got created 2 groups. pls provide some idea to fix this issue, we don;'t see the delete option.

[Pooja]

Hi Nagesh,

Could you please suggest way, How we can delete one entitlement? we don't see any option to delete it.