SAP Incremental Import not capturing Removal of Sap roles
Pre-requisites
SAP connector configured and incremental import is being scheduled.
Applicable Version(s)
All versions EIC or non EIC
Solution
The incremental import works fine when a role is added in SAP (that is access is added in Saviynt). However incremental imports do not capture the removal of sap roles in the target SAP system. User access is not updated in Saviynt when a role is removed.
The correct way to capture role removal is to run the full imports (consisting of tables USR02 and AGR_USERS) instead of running incremental imports. Instead of bringing in just the delta, we are importing all the data stored in USR02 and AGR_USERS. This allows the data to be in sync with SAP whenever a role is removed.
SAP TABLES INFORMATION:
The two SAP tables (USR02 and AGR_USERS) contains below data
USR02 - Account metadata
AGRE_USERS - accounts and entitlements mapping
