Hi,

We have onboarded Azure AD as an application in Saviynt. As part of the requirements, we need to import the Azure AD accounts and entitlements.

For entitlement import, we need to import the following types of groups:

• SKU
• DirectoryRole

We have configured the connection and the job to import SKU & DirectoryRole groups. For SKU, we are getting all SKU groups as entitlements in Saviynt + their membership after running import jobs. 

However, for DirectoryRole, although we are able to fetch all the roles into Saviynt but their membership is not getting imported.

We have verified that the client that we are using in Azure AD connection has the required permission to read DirectoryRole membership.

Please advise.