Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Is it possible to restrict users to only request one Enterprise Role per request?

yogesh
Regular Contributor III
Regular Contributor III

We dont want the users to request multiple roles.

Version v23.3

3 REPLIES 3

DaanishJawed
Saviynt Employee
Saviynt Employee

Hi @yogesh ,

This is currently not supported.

Please raise this is as an enhancement request on Ideas portal - https://ideas.saviynt.com/ideas/

yogesh
Regular Contributor III
Regular Contributor III

Hi Daanish,

Is there a way to reject the request autmatically via workflowif the number of roles is more than 1?
I was trying to find in the docs but not sure how to get the role count in the workflow if condition. Can you please let me know if there is any object that can be used to get this info and reject the request?

We have to do all this because there is a bug in Saviynt modern UI which allows any of the approver to approve all roles in the request if the request contains multiple roles. Even if it is not assigned to them for approving.

This bug is a security risk and has been reported here:
https://saviynt.freshdesk.com/support/tickets/1600080

Hi @yogesh ,

I was able to check internally and there is no way to restrict to one enterprise role by defining them in workflow.

We will have to push for the fix as mention in the FD.

Thanks.