Hello,
How can we provision account on a target without a specific entitlement on a target like Active directory?
Our accounts does not have any standard group so we cannot give a default entitlement collected from the target for that.
This should be given when the identity is created in RSA without any form to fill by someone.(auto)
I suppose to use a joiner rule for that but not sure of the path to follow.
Thank you.
Hello,
One idea i used was creating two Active Directory groups. APP_AVEKSA_ONBOARDING and APP_AVEKSA_OFFBOARDING.
We have a rule that automatically adds any new joiners to APP_AVEKSA_ONBOARDING and the end result is a new Active Directory account.
Hi,
Thanks for the reply .
Finally we have found a solution by create a local entitlement collector which let you create manually an entitlement in RSA on the directly and give the possibility to create an active directory account with account template.
My initial question was not really clear I think, it was about the ability to provision an account to a target without a real entitlement on the target so this manual entitlement resolved the case.
Hi,
Thanks for the reply .
Finally we have found a solution by create a local entitlement collector which let you create manually an entitlement in RSA on the directly and give the possibility to create an active directory account with account template.
My initial question was not really clear I think, it was about the ability to provision an account to a target without a real entitlement on the target so this manual entitlement resolved the case.