Hi Experts,We are planning to launch a service account campaign and we were advised to set Account Type attribute to 'Service Account'.we have around 1000+ account and doing it through CSV upload is very time consuming also we are looking for a way t...
Hi All,My query is can we delete unwanted Campaign permanently, In our case for some reasons we created some 3-4 test campaign also some 2-3 Campaigns were not created properly so they were discontinued. So we want to delete those Campaign which are ...
Anyone have experience/issues creating a campaign based on Role Query?We created a role owner campaign with the following configurations:Campaign Type: Role OwnerApplication: Shown in pdfCampaign Based On: changed from Role Certifier to Role QueryRol...
Hello, my team wants more clarity as to what these visuals mean. To our understanding the out of band graphic shows 3 accounts deemed privileged or a risk rating of 4. While the other graphic (low risk shows the users and the access that has a lower ...
Hello, my team is looking to capture the information on all the users that have selected the "Does not work for me" action during a user manager campaign in a report and possibly a dashboard view. Is there a way to pull out that information in a repo...
Hi,I having problem where I cannot select specific certifier for my Entitlement Owner Campaign. The status will become automatically complete. Kindly advise.
When utilizing the dashboard, we would like the information from the charts and widgets to take us to table that provides more detail on that specific feature. For example, when clicking on (Summary of User Manager Certification-Approve/Revoke Entitl...
Hi,We have created an Azure Connection and EndPoint. The Azure endpoint brings in the Azure VM's and other resources as entitlements. We are able to see Entitlements Hierarchy in the Accounts which are associated with the connector and we are able to...
Hello,In order to run re-certification campaign of "Entitlement Owner" type. We want to skip the step 1 of "Ownership verification" and go directly to the step 2 to certify accounts part of the entitlement.Contrary to the "User Manager" campaign, the...
Hi All,Is there any way to display all nested child entitlements in the Entitlement Owner campaign?OR How to store all nested child entitlements under parent entitlement?Existing scenario (data stored in the following way)Ent1 (Parent)Ent2(child enti...
Hi,I wanna know if the wording for campaign action can be change? for example the default wording is 'belong to me' and 'decomission'. I want to change it to something else. Kindly advise.
Hi Team,We have a requirement where we need to send 10 email reminders for Campaign but in the Certification configuration, we only have 5 email reminders that can be configured.Could you please confirm if in any way we can achieve this?@ParitaSavla
Hello, I have a question concerning the workflow for a user manager Campaign. Our team understands the logic that in order to see entitlements within the Step 2 Data table a user must action on their user's employment status in Step 1. During testin...
When configuring a campaign, a campaign admin has the option to select users from Active directory list, however the current search functionalities will not populate a user if both first and last names are entered within the search bar (see image). I...
Hi All,We have a requirement to add Manager's Full Name in display attributes of an User Manager Certification because when we use reassign option for users, reassigned person got confused who is the original Manager of the users.So I have tried to u...
Hello, Our team is configuring a user manager campaign with both step1 employment verification and step 2 Access approval. In our configurations we only want users to consult in step 2. When a user is consulted, they are able to view step 1 which is ...
Is there a way to certify accounts & entitlements on one security system and just entitlements on another in the same campaign? I am in a 5.5 SP3 environment. If this is not possible in 5.5, is it available later or in the roadmap?
I have several questions:I need to schedule an entitlement owner campaign to run on a scheduled basis. Each time the job runs, it creates a new campaign in preview mode. How do you configure to activate the campaign immediately? I don't understand...
Is there a label that corresponds to user custom properties during a campaign certification? We've appended unique identifiers to every User Custom Property 61 label in the User Interface Branding Configuration, restarted, and still see the old field...
Hi,I am want to create a service account campaign but every time I am creating the campaign it is getting automatically completed.Below is my campaign configuration and the account i want to certify. Below is the Error I am receiving in the logs for ...
Hi,I am trying to create a service account certification to query out all the orphan accounts with account type = "Service Account".Below is the service account iam trying to certify via certification.Below is the cerfication query iam trying to use:...
Hi,I am trying to determine the binding variable for the certifier's email address in the Revoke Task email. Also when the task is created to Remove child entitlement ${users?.email} is a null value so I would like to add a conditional logic check no...
Hi,In a user manager campaign when we consult a line item with a user an email notification is triggered to that consultant user. But when a reminder email is triggered for the same line item it is sent to the original certifier.Is their any way to s...
Our team is looking to filter out users with outstanding certifications (i.e users with no response in their certification) and launch a new campaign that will escalate to their manager to complete. Currently our query is using the cus.certfied is nu...
Hi Team,For an Entitlement owner type Campaign, I am not able to enable the "Consult" option for a reassigned certifier. The reassigned certifier is able to view the option but is not able to consult the user access with some other user. Please sugge...
I wanted some clarification on what happens when the Add Certifier (consult associated Account/Entitlements) is checked on during a consultation to another user .To my understanding if a user consults and checks off this box it will also consult o...
Hi Team,We are not able to change the email body font colour in the email templates. Could you please suggest how can we change the font colour. Thanks.
When first configuring a campaign from a rule, there are default values. Where are those coming from? They do not match any of the user manager certification templates values and there is no place to select a template.
Hi Team,When we are selecting the option of "Select All" option in an entitlement owner , all the records which are present in that particular campaign . But my client requires the "Select All" option to select only the records which are available ...
Does anyone know of anyway to utilize certification campaigns to certify structural authorization in SAP? As far as I can tell there isn't a way to determine structural auth in Saviynt but hoping someone has run into this before.
Hello,We have an application which has entitlements and these entitlements have privileges defined. Each user when granted an entitlement has different set of privileges. As part of the user manager certification process, we want the reviewer to revi...
Hi,When we try to revoke nested membership as part of the entitlement owner campaign, a revocation task is created and completed but does not remove nesting from the target. Do we need to run any job for this or does Saviynt not remove it from target...
I have a question as to who this email will be sent out to/ triggered by. Will the Certifier that revokes an entitlement receive the revoke task email or will the user that has their entitlement selected to be revoked receive the email that their acc...
Is there any way to provide exclusion filters to exclude roles or entitlements while defining a certification? (e.g., birthright access)
Hello,We have a requirement on Entitlement Owner Certification that when a certifier choose "Does Not Belong Me", the certifier can choose an owner or reassign to default certifier. Then complete and lock the certification. However, Saviynt Certific...
Does Saviynt supports SQL queries in 'Select From Manual Query' on 'Select Certifier' Step ?I am giving a SQL statement and keep getting an error (Invalid SQL syntax error) in the UI. Here is the sample query :u.username in (select username from us...
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
Hi Team,Is possible to configure certification expiry to expire only certain certifications.Usecase:we want to expire only the mover certifications that generated based on update rule which are past due and we do not want to expire the quarterly cert...
Hi Team,We have a request to launch a Campaign where there is an application with 4 entitlements and each Entitlement has different Entitlement owner.Whenever an application specific certification triggered, review of permission A should always go to...
If I want to filter out users that did not record a response for their certification and launch a new campaign with those selected users under which query field, would I need to use. Under the Select certifier there is an option to place a manual que...
Hi - we are looking to launch a Service Account certification and used the advanced query options to only Service Accounts that have a certain value in the custom property of that account. For example, SV1C, SVC2, have the value 'Workday' set in Acc...
To my understanding within this current version 5.5 SP 3.x there is no automatic bulk escalation of certifications for a user manager campaign to reassign from an L1 manager to an L2 manager. With this in mind I am looking for another possible workar...
Hi,So we have a different type of user (Customer/Supplier) whose email needs to be generated in a particular way, however when we include it in the email generation query under global configuration it throws the following exception:Query : case when ...
Hi Team,In UM campaign, Show Access Attributes have a list of fields. One of the default fields it has is account name. But, the account name here references the displayname of the account in the campaign. For one of my use case, I need to display th...
What is the difference between consult and reassign in campaign certification?
Hi,Is there a possibility to create or launch a new certification via DashboardsAs the documentation specifies, we can only retrieve on-going certifications that are either in progress or discontinuedRegards,Abdul Gaffar Khan
Is there any way to create a certification for a single specific role, entitlement? Also, can we launch certification based on a user attribute?
Is there any way to show role owners who all also owns the role in a certification campaign?I know you can show entitlement attributes, but there is no owner or certifier option:Ideally, it would show it on the entitlement info:
When configuring a Campaign, we have the option to select a default Certifier and Reassignee ? Is it only limited to a single user for both options. The Campaign Owner field within the Campaign creation allows for a group to be selected and for both ...
Hi,We have a requirement on updating user email on their change of company and need a logic or a workaround for the same.We have around 82 companies at the moment of which 77 companies have the same email domain, except the leftover 5 companies which...
