Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Did you know? We will have the ability to extend access's end date soon

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 22 2020 at 18:49 UTC


  1. What is the business use case which we are trying to solve by extending end date of the assigned access?
    1. In an organization, if a project timeline is extended or cut short, then there is a need to extend or cut short the end date of the user’s assigned access relevant to that specific project
    2. Entitlement owners, App Owners or Managers may conditionally certify a user’s access in Access reviews. The user then should be allowed to make a self-request for extension of end date of assigned access with proper justification


  1. Which access request features support end date extension in 6.0?

Request access, Request access for others and Manage Service account


  1. Which SSM objects allow extension?

Access, Application Role, Enterprise Role and Emergency roles which are requestable in request access and manage service account screens


  1. What are the pre- requisites for setting up end date extension?

End date extension is configurable only for access and roles if start date and end date were defined when the objects were initially requested


  1. How do we submit extend end date request?

Click on the icon as highlighted below in Modify Access Request and add new end date before submitting request




  1. What is the request type for end date extension?

Update Access End Date


  1. Who can request for end date extension?

Anyone who can request for access for the user can also extend the end date of the access


  1. Do we create task for extension of access end date?

Yes, and Task type is “Update Access End Date”

On processing of the task, the end date of the access will get updated in SSM


  1. Do we support manual completion of task and completion via provisioning job?

Yes


  1. Do we support extension of access end date from API?

Yes, supported in v5 version of createrequest API only for extension of access


  1. Do we have the capability to notify user/manager that the entitlement is about to expire?

Out of the box control will be rolled out which will pick up all the access which are about to expire based on a number of days in below configuration and send out an email to user/manager the list of entitlements that are about to expire from now until number of days configured

Configuration - 'Number of days before Entitlement expiry date' added.


  1. What’s coming up in future?
    1. Bulk upload from Multiuser Request tile



This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
6 REPLIES 6

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 22 2020 at 18:58 UTC

Hi Aarthi,


Thanks for the insight.


Few question on point 8

1. Is this a new task type?

2. Also, what json of the connector will it call?

3. If its a new json, what all connector will be having it.


Thanks,

Minesh Shah.


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 22 2020 at 19:22 UTC

Minesh,


Yes, it is a new task type as highlighted in Point 8 - Task type is “Update Access End Date”

We don't yet have the capability to integrate it with connector framework, however, PM team is looking for options to enable it future releases

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on December 17 2020 at 12:43 UTC

Hello,


Do we have this capability available in SSM v5.5 SP 3.3?


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on December 17 2020 at 14:14 UTC

Hi Pallavi,


Yes, it's available in v5.5 SP 3.3. however, it's available only for the entitlements assigned to accounts and not for the enterprise roles.

Allow Update of Access End Date should be enabled in Entitlement Types to get the modify end date option, please refer the below document for reference

https://saviynt.freshdesk.com/support/solutions/articles/43000431385-creating-entitlement-types-from...


Regards,

Santosh

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on December 18 2020 at 12:58 UTC

Hello Santosh,


Is this feature integrated with Connectors? Can we propagate the expiry date changes to target system (SAP)?


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on February 17 2021 at 22:42 UTC

Can you please tell in which version the option to modify end date on enterprise roles is available ?

Does this allow date extension (future) only ?


We're on version 5.5SP3, Allow Update of Access End Date this global config is available only if we enable end date mandatory config, if not it is grayed out


Is it possible to enable this without enabling end date mandatory ? considering a use case where we don't provide a end date when assigning the role


image


image


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.