and more in a single search tool across platforms. Read the announcement here. |
Hi Experts,We are planning to launch a service account campaign and we were advised to set Account Type attribute to 'Service Account'.we have around 1000+ account and doing it through CSV upload is very time consuming also we are looking for a way t...
Hi,We are trying to create exchange mailboxes on a hybrid environment. We also have the script at a location with logging included. However, the create account JSON is throwing error. Can someone please validate if I am passing the file path and the ...
Hi, I am trying to create a user update rule that triggers a certification when the end date of the user is 8 days away, but the rule is unable to launch a certification campaign even though all other actions like "send an email notification" or "dep...
Hi,We have created an Azure Connection and EndPoint. The Azure endpoint brings in the Azure VM's and other resources as entitlements. We are able to see Entitlements Hierarchy in the Accounts which are associated with the connector and we are able to...
I have several questions:I need to schedule an entitlement owner campaign to run on a scheduled basis. Each time the job runs, it creates a new campaign in preview mode. How do you configure to activate the campaign immediately? I don't understand...
Our team is looking to filter out users with outstanding certifications (i.e users with no response in their certification) and launch a new campaign that will escalate to their manager to complete. Currently our query is using the cus.certfied is nu...
Hi Team,For an Entitlement owner type Campaign, I am not able to enable the "Consult" option for a reassigned certifier. The reassigned certifier is able to view the option but is not able to consult the user access with some other user. Please sugge...
I wanted some clarification on what happens when the Add Certifier (consult associated Account/Entitlements) is checked on during a consultation to another user .To my understanding if a user consults and checks off this box it will also consult o...
When first configuring a campaign from a rule, there are default values. Where are those coming from? They do not match any of the user manager certification templates values and there is no place to select a template.
Hi Team,When we are selecting the option of "Select All" option in an entitlement owner , all the records which are present in that particular campaign . But my client requires the "Select All" option to select only the records which are available ...
We are seeing a weird behavior where the remove access task is created immediately when the certifier does future-dated conditional certification. Will access be revoked as well or remove access task just stays in open state until the end date is rea...
Hi,After the recent saviynt version upgrade from 5.5SP3.9 to 5.5SP3.13, we are getting 403 forbidden error while calling few native Rest APIs.We tried searching if these webservices access are already assigned or available for assignment but couldn't...
Does anyone know of anyway to utilize certification campaigns to certify structural authorization in SAP? As far as I can tell there isn't a way to determine structural auth in Saviynt but hoping someone has run into this before.
Is there any way to provide exclusion filters to exclude roles or entitlements while defining a certification? (e.g., birthright access)
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
I created a tiered campaign in which application owner campaign will review all the accounts approved/rejected by user manager campaign. During the application owner certification, where can the certifier see what action was taken by manager on these...
Hi Team,Is possible to configure certification expiry to expire only certain certifications.Usecase:we want to expire only the mover certifications that generated based on update rule which are past due and we do not want to expire the quarterly cert...
Hi - we are looking to launch a Service Account certification and used the advanced query options to only Service Accounts that have a certain value in the custom property of that account. For example, SV1C, SVC2, have the value 'Workday' set in Acc...
To my understanding within this current version 5.5 SP 3.x there is no automatic bulk escalation of certifications for a user manager campaign to reassign from an L1 manager to an L2 manager. With this in mind I am looking for another possible workar...
Hi,So we have a different type of user (Customer/Supplier) whose email needs to be generated in a particular way, however when we include it in the email generation query under global configuration it throws the following exception:Query : case when ...
Hi Team,In UM campaign, Show Access Attributes have a list of fields. One of the default fields it has is account name. But, the account name here references the displayname of the account in the campaign. For one of my use case, I need to display th...
What is the difference between consult and reassign in campaign certification?
Is there any way to create a certification for a single specific role, entitlement? Also, can we launch certification based on a user attribute?
Is there any way to show role owners who all also owns the role in a certification campaign?I know you can show entitlement attributes, but there is no owner or certifier option:Ideally, it would show it on the entitlement info:
When configuring a Campaign, we have the option to select a default Certifier and Reassignee ? Is it only limited to a single user for both options. The Campaign Owner field within the Campaign creation allows for a group to be selected and for both ...
Hi Team,Please help me with the SQL query with which I can fetch the details of the users for whom a particular campaign has been launched,
I am trying to access a role owner campaign via the API and am not able to find details in the API reference guide. I see entitlement owner, application owner, and user manager so seems odd that role owner would not be included. Does anyone know if...
Hi,We have a requirement on updating user email on their change of company and need a logic or a workaround for the same.We have around 82 companies at the moment of which 77 companies have the same email domain, except the leftover 5 companies which...
Hi,We have recently seen a weird behavior with update user form. The update user form which was originally generating the request number on submission is no more generating the same. Also, we cannot see it in the Pending approvals queue.Could there b...
Hi,We are trying to provision Azure Security groups via graph api and distribution groups via powershell within the same connector.We have used a rest connector and have written the following condition in Add Access JSON as below:When we provision a ...
Hi Team,Is there a possibility where we can display the entitlement type while certifying the account or entitlement Is there a possibility to customize a privileged attribute as shown below to be included in the entitlement owner certification
Hi Team,Please confirm whether in case of an entitlement owner campaign , an entitlement owner export the entitlements he/she needs to certify and re - upload the file after completing the certification.Or can we provide any alternative for the entit...
Hello,We have NOT configured the Consult/Reassign User Query in Campaign Advanced configurations. But for most users, when they select Does not work for me, they could see a limited set of users in consult/reassign list and not all active users.I am ...
Hi,We need to disable Exchange account for a user on termination. However, that is triggered via powershell script for license disablement on exchange.We are able to pass the http params via update account json, which includes the username of the use...
Hi,We have a requirement to generate usernames in sequential numbers for various categories of users created via Created User Form.We have five categories of user, of which 4 categories of users we are generating Category Code (from dynamic attribute...
Hi,We have created Shared Mailboxes on a hybrid environment, where the shared mailboxes could be reconciled via AD reconciliation. However, we cannot see the delegates who are part of those Shared Mailboxes in AD.Is there a way to reconcile the deleg...
Hi,I am trying to populate a field of users where multiple email users could be selected from the system in the dynamic attribute of a create users form.I am using Attribute Type as : Multiple select from SQL QueryValues : select email as ID from use...
Hi,We have around 18000 departments which we wish to populate in a dropdown in the create user form from a dataset table that we have imported.However, dataset gives us a threshold of only 10k lines of entries.Any workarounds for this use case?Can we...
Can someone please share the Access list for ROLE_SAV_MANAGER in 5.5 3.x.I am looking for Access list using which a user belonging to that SAV role can perform certifications (Attestations Menu with no Create Campaign function) and have ARS Menu with...
Hi team,Email is not getting triggered when Reassigning a certification to new certifier, Below is the email template usedUsing a default email template available at freshdesk.https://saviynt.freshdesk.com/support/solutions/articles/43000622153-manag...
We are trying to write an email generation query under global configuration. However when we upload the query it throws an error as "Operation not allowed as you are entering a value that resembles or contains script code"Attaching a part of the quer...
Hi,We have a requirement to relaunch a campaign for all users whose campaign response was ' No Response'.We have selected to revoke tasks for certified users on campaign expiry and hence, for users for whom 'No Response' was selected, we need to rela...
Hi,We have a requirement in which the companyname of the user being created should be equal to the company name of the requestor via the Create User Form. However, the manager to be shown in the dropdown should belong to the company name select, whic...
Hi,During Entitlement Owner Certification, I want to exclude those entitlements that does not have owners.How can I achieve this, if this can be achievable through advance query.Can I get the sample query? Thanks,Sanjeevini
Hi Team,We have requirement of assigning Certifiers based specific conditions for ex :if Certified User (beneficiary) is a manager (title) and Country USA- his Certifier should be Managing (title) Directorif Certified User (beneficiary) is a Develope...
Hi,We have a requirement to generate user PIN which will be used as username of the user. WE aren't able to generate username as PIN via Add register rule under global configurations via a query. Hence we wrote a Saviynt to Saviynt user import query....
Hello,When a user manager assigns a user to another manager after selecting does not work for me during certification which updates the user table, how do we get that information to HR? In our scenario there is no connection between the HR system and...
Hi Team,We have approval, Certification reminder emails configured , Can we avoid sending on Weekends, since not body will check still it will be counted as one reminder sent.Is there to achieve this ?
hi Team,How to test Campaing Reminder emails with minutes interval as it has only days configured, we have to wait for days to test, any thing we can tweak to set that interval in minutes ?
Hello,We want certifier to consult from rank 3 entitlement owners. We tried both below queries and they don't return any during certificationselect u from Users u where 1=1 and u.id in (select distinct eo.userkey from Entitlement_owners eo where eo....
