How to Find duplicate entitlements for endpoints

[prasannta]

Use Case

How to Find duplicate entitlements for endpoints

Pre-requisites

N/A

Applicable Version(s)

All

Solution

To identify the duplicate entitlements present in the database, the following query needs to be run:

SELECT 

    COUNT(ENTITLEMENT_VALUEKEY),

    entitlement_values.ENTITLEMENT_VALUE,

    entitlement_types.ENTITLEMENTNAME,

    endpoints.ENDPOINTNAME

FROM

    entitlement_values,

    entitlement_types,

    endpoints

WHERE

    entitlement_values.ENTITLEMENTTYPEKEY = entitlement_types.ENTITLEMENTTYPEKEY

        AND entitlement_types.ENDPOINTKEY = endpoints.ENDPOINTKEY

        AND endpoints.ENDPOINTNAME = <<Endpoint Name>>

GROUP BY ENTITLEMENT_VALUE , ENTITLEMENTNAME , ENDPOINTNAME

HAVING COUNT(entitlement_valuekey) > 1;

NOTE: Endpointname needs to be modified according to your requirement or it can also be completely removed if you just want to find the duplicate entitlements across all the endpoints.

References

[Paul_Meyer]

What is your recommendations to resolve duplicate entitlements in an Endpoint?

[rushikeshvartak]

Why duplicate entitlement getting created ? Isn’t it should be blocked or database constraints should be added ?

[prasannta]

@Paul_Meyer This would happen only if there are duplicate entitlements in the actual end system. We normally suggest the application teams to identify the correct entitlement and delete the duplicate from the end system.

[prasannta]

@rushikeshvartak Duplicate entitlements are not created in Saviynt. This would only happen if there are duplicates present in the end system and are brought into saviynt through reconciliation. The corrective action is such cases is to delete the duplicates from the affected applications.