and more in a single search tool across platforms. Read the announcement here. |
Hi Team,We want to hide a specific entitlement and are only available to request if the requestee/user has country= 'Thailand' AND location = 'Office' attributes in their profile and the rest of the entitlements/roles will be available for all to req...
The authoritative source feeds the manager to Saviynt with the manager's email address. We tried to get the mapping through the import preprocessor with a syntax such as: { "ADDITONALTABLES": { "USERS": "select USERKEY, USERNAME, EMAIL from...
Hi.I am configuring to import users from Azure AD.https://docs.saviyntcloud.com/bundle/AzureAD-v24x/page/Content/Configuring-the-Integration-for-Importing-Users.htmI want to set Saviynt user's displayname as "givenName, surname".So, I configure colsT...
While trying to create groups in Active Directory through the API with a different displayname than cn name, we ran into a bug (or at least we think it's a bug). The entitlement_value of our entitlement is different than our displayname. The entitlem...
Hello,We are facing intermittent issue with user import using SAP connector for trusted source. We are getting null values in user import for few user attributes. This issue occurs intermittently and has no specific pattern. A very next import brings...
Hi Team,I have setup trigger chain Job which consists of below jobs serially:JOB Name -> Job TypeSFTP_Import_Job -> FileTransferJob Decrypt_FILES -> Invoke Extension JAR Job (ExternalJarJob) Now, On running Trigger chain Job, ...
Hi,I am currently working on the Entitlement Owner campaign. For Entitlement Owner, I have mentioned endpoints which need to be validated. But for some reasons, the entitlements from different endpoints which have not been mentioned in the query also...
Team,We are integrating few applications using disconnected approach where we are expecting the Application fulfillment team to come to saviynt and complete the tasks manually. To do so we added the respective application fulfillment team members to ...
On running Detective SoD Job, we see open violations on SoD dashboard violation list.We navigate to SoD -> SoD Violation list but the table shows account name column as blank. What is Saviynt printing in Account Name column? All accounts in Saviynt h...
Hello,We are currently facing an issue while trying to provision mailboxes for users through the Saviynt Security Manager, utilizing the Windows PowerShell (Win PS) connector. Our setup includes a properly configured connection object, and we have th...
Hi everyone, Does anyone of you know a way to use the is updated condition in an Advanced Query. I am only able to get it to work, when I use the Basic Query. I tried using the following options, but neither of them work: a.lastname is updateda.lastn...
If we setup a deldgate where parent user has admin savrole and the delegate user has an enduser savrole, the delegate user is able to see all the pending approvals in his queue(the ones assigned to the parent user and the ones assigned to any other u...
Hi All,We have two dynamic attributes: DA1, DA2.DA2 can have value either '1' or '0'. We want that if the value in DA2 is '1' then HIDE DA1 else show DA1.I have configured it as below:- Type of DA2 is ENUM with possible values 0,1- Made DA2 as the pa...
Hi everyone, since the Upgrade to v24.1 the following behaviour occurs.User Update Rule uses Advanced Query Advanced Query contains special characters (such as "<" or ">")Preview works fin, but if you save and reopen the UUR, the characters are reply...
Hi,The mitigation option is not visible in ARS while approving the access. It shows that mitigation options are available but there are no options visible to mitigate. We have enabled all the required global configuration.Best Regards,Aditya Chadde
Hi All,While creating new account in SAP systems, we are trying to update the Reference User Attribute present under "Roles" tab within the SAP system with a default reference user id. Account is getting created successfully but the Reference User at...
ADSI create account and add access tasks are not getting completed even the AD account is getting created.Create Account JSON -{"objects": [{"objectClasses": ["user","top","Person","OrganizationalPerson"],"attributes": {"cn": "${cn.replace(',', '\\\\...
Hello Commuity, We are NOT able to set extension attributes during the creation of AD account using the ADSI connector.Error in the ADSI connector logs- ERROR ADSIConnector.Common.Helpers.ResponseHelper Please check the data sent to extensionAttribut...
Hi,After completing the cerification progress is still showing "fully executed 0%" where it should be showing "fully executed 100%".Can you please provide the suggestion and troubleshooting steps for this?Thanks.
Hi Team - I am looking for a way to print the Entitlement Start Date and End Date in the task completion email. Please can someone advise> I have tried using ${entitlementshtmltablerows} but that does not work in the task completion email.
Hi.AD security system sync with Saviynt through an import job.Endpoint filter applied to AD and logical endpoint named 'sample_endpoint' exists.Entitlement_value 'A' created in sample_endpoint by API or admin's manual work.'A' entitlement created in ...
Hi All,I need help importing the proxyAddresses from the Active Directory to userattribute.I used the below-mentioned query in USER_ATTRIBUTE JSON in the AD connector. [username::employeeNumber#String,userattribute_email::proxyAddresses#String,crea...
Use case: Create a user using Saviynt's 'Create User' request form and save dates like Start date and end date with attribute type as Date (Date Picker) along with other required user attributes. Once created, update user attributes from 'Update User...
Hello everyone, After updating our tenant to 24.1 we are seeing two options in the ARS page; Application and Role.This option 'Role' is visibile even though we don't have any roles to request access. Is it normal or a bug? thanks,Nazli
Hi,We are currently mapping the manager in AD to the owner field in Saviynt with a preprocessor that looks like this:"update NEWUSERDATA SET OWNER = (select CU.USERNAME from CURRENTUSERS CU where CU.CUSTOMPROPERTY36 = NEWUSERDATA.OWNER)"Basically, we...
Hi,We are currently trying to trigger a csv file via uploadUserRequest. We are using the endpoint https:/{Base_url}/ECM/api/v5/uploadUserRequest according to the documentation here: https://documenter.getpostman.com/view/23973797/2s9YC5xBrz#a6d2f398-...
Hi,We have created a local auth enabled account that needs to access Saviynt only through API. When the user first login they need to reset the password. The user does not get the authorization token because the password has to be reset first. As suc...
Hi everyone, I have a User Update Rule (UUR) that uses the Action Re-Run Selected Technical rules. Unfortunately, when the UUR is matching and is triggered, it does not execute the selected Technical Rule. When I use Re-Run All Provisioning Rules it ...
Hi, We have a requirement where we want to use consult request feature which can be seen ARS (Home) --> Pending Approvals --> View Request --> Three Dots --> ConsultWe tried looking for config/setup of the same on Documentation portal and here as wel...
Hi,We have 4 dynamic attributes of an app. We have set accounts column to store the values. But when we are going to the modify request it is not showing the stored values. But we can see it is there in the accounts attributes. I am pasting the dynam...
Team,We are integrating few applications using disconnected approach where we are expecting the Application fulfillment team to come to saviynt and complete the tasks manually. To do so we added the respective application fulfillment team members to ...
Hi Team, We have assigned one sav roles for some 5000+ users, now we need to remove that sav role from users. Is there any bulk method to remove the sav role? Please help us here Regards, Varshitha
Hi, We have a requirement where we have to approve/reject a request for an entitlement based on the existing entitlements the users account has. If user has entitlement A of Account A, only then grant access to the requested entitlement B. Similarly,...
Hi, We are trying to use the regexp_replace feature in the data analyzer and are getting an error. The first regexp works as expected. Query: selectu.customproperty59 regexp '%|\[|#|!|\*|&|\(|\)|~|`|'' | { | \ ^ | } | \ \ | \ / | \ ? | > | < |,|;|: |...
Hi Team,We are trying to set cyberark vault configuration to store and fetch pwd for applications. Able to get all the details through postman.We set up the vault connection.When using it in one of our DB connection with the vault config, and test an...
Hi folks,For some applications connected with REST connector, WSRetryJob is running and tasks are getting completed with appropriate result on the target, but the task itself in Saviynt is getting discontinued with the error message : "USERNAME IS NO...
We have configured a target salesforce application using the REST Connector. Upon a Role removal a remove access task gets triggered for 'profile' entitlement type. However upon provisioning the task doesnot gets processed as in salesforce profile is...
We ran into a new issue last weekend:We're maintaining some AD child endpoint entitlement custom properties manually in Saviynt for controlling how the entitlement behaves in approval workflows and also for setting display name for the entitlement in...
Hello,We have always been able to delete group memberships from accounts these past couple of months. All of a sudden, when we try to add a remove access task, the comments say "{account} not found in LDAP/AD"The connection to AD is successful, The a...
Hi, we need to have an auto complete on the create account for a an application but Saviynt seem to struggle on the auto completion even if the JSON response is 200 with success.This is the CreateAccountJSON (url removed):{"accountIdPath": "accountNa...
Hi,We have onboarded Azure AD as an application in Saviynt. As part of the requirements, we need to import the Azure AD accounts and entitlements.For entitlement import, we need to import the following types of groups:SKUDirectoryRoleWe have configur...
Hi All,Please refer below issue description:We are trying to import accounts from Encompass application.We have successfully imported the accounts and entitlements also, mapping is completed for active accounts.The inactive accounts do not have the e...
Hi Team,We are having a usecase in DB connector (Type HANA DB), using database connector type, where in revoke access need to pass dynamic value of the grantor who granted the access(role) to user.REVOKE CONTENT_ADMIN FROM ZSAVTEST GRANTED BY SURAMP;...
Hi Team,We have integration between Saviynt and Oracle EPM and we imported all Accounts, Roles and Groups from Oracle EPM through import job. Since the Oracle EPM of our client contains accounts from different Domains is there a way to add Account Fi...
We have an Endpoint for Active Directory accounts. We want to create unique AD accounts for new joiners. For eg. for user 1 with name 'Amit Sharma', Saviynt should create an AD account with DN: 'CN=Amit Sharma,OU=Store Support Users,OU=Corporate,DC=D...
Hello!I am looking to clear out an account attribute value on a list of inactive and deleted accounts. I tried uploading a file with the account names, endpoint, and the subject attribute (with empty values in the attribute column so they would be cl...
While executing Enable Account task of jar connector endpoint we are getting below error, below are the extracted logs for the same.Attached complete log file of Enable account Task Failure. (also attached Remove account and Disable account task fai...
The UpdateUserJSON is not updating my user, the update user task is getting created for the user but it is not updating the user. Below is the format: {"actions": {"Update Login": {"call": [{"name": "updateusercp","connection": "userAuth","url": "htt...
Hi,We have integrated AD application using ADSI connector. One of the requirements is to create an AD account for user from Saviynt. The new account should have CN in the following format: lastname, firstnameTo address this requirement, we have creat...
Hi Team,We have created a custom SAV role, and we want users with this role to be able to view pending tasks. We have added the necessary features to the SAV role and assigned user with this role as endpoint owner. However, we are still unable to see...
