and more in a single search tool across platforms. Read the announcement here. |
Hi Team,We would like to provision multiple group owners to AD while creating or updating the group from Saviynt.We were able to find the below code snippet from docs but looks like it didn't work properly."otherManagedBy":"${ownerAccountListMap.get(...
How can we disable/hide remove option from an access request. Tried table only add under request action but still see the remove option. Any suggestions.
Hello Everyone, I am trying to upload accounts and their entitlements using file based schema approach, the job is running successfully and the entitlement type is created in the Entitlements Hierarchy of the accounts as well but when I am clicking o...
Hi Everyone,We would like to import groups with friendly name.In groupImportMapping, I did mapping like entitlement_value:distinguishedName_char. But it is creating as CN_testgroup, OU=Groups,…. This is not user friendly from ARS and Campaigns persp...
Hello, We are having issues getting the Upload Entitlement from CSV to work for adding Owners to AD Group Entitlements. I have tried a bunch of variations for the Security System (Sec System name and Display name), Endpoint (Endpoint Name and Display...
Hello ,We have a requirement where while using Manage AAD Group under ARS to update the owners for the existing AD groups , we need to add a restriction where remove owner action is only allowed for a certain group with more than 2 owners.For any gro...
Hello, We have two AD connections; one for regular user accounts and one for admin accounts. We are wanting to map the accountID of an owner on the regular AD connection to be the owner of the entitlement on the Admin AD connection. Is there a way to...
Hi everyone,Is it possible to import AD groups from multiple OUs?Could it be possible by specifying in the groupSearchBaseDN multiple OUs from where Saviynt is going to start importing the AD groups and how should be the syntax to do it?For example:I...
Child and Parent group assignment is not happening while creating the Entra ID Group from Saviynt.The task type "Add Access Entitlement" is getting created for Child and parent Group assignment. These tasks are not processing at all.We are not gettin...
When importing groups for Active Directory, if the groups contains specific naming convention like 'Local Admin', is there a way to set the customproperty5 to 1Can we configure this inside connection?
We have requirement from our learning app team to simplify the process of assigning users to the specific group, that would be giving access to the training in the learning portal and would give possibility to send email to the users assigned to it. ...
Hi, I'm trying to automate the process of assigning users to user groups in Saviynt. I was able to set requestable user groups on Saviynt Endpoint and raise a request. After I pushed the task, saviynt did not add the users to the user groups and I co...
Is anyone using any forms of AD group self-service management for business users? We'd like to provide some business users the ability to manage their own AD groups, but we are finding the workflow planning to be quite complicated.We are considering ...
Remove Owner from the Azure AD group is not working at all. Add owner to the Azure AD group is working fine. The JSON which I am using is mentioned below. I have attached the logs for reference.{"name": "AADGroup","connection": "accAuth","url": "http...
We have a large numbe of Entra ID groups, and have begun using EndPoint filtering to associate them with our applications using Endpoint Filtering on our Azure AD connector.However, this has had the result of creating duplicate entitlements:They are ...
I am trying to upload a bunch of entitlements into Saviynt to do a bulk owner update. Every time I click the import button the page starts spinning and after a few minutes I get the 504 error. I am uploading roughly around 4 thousand entitlements. I ...
Hi Team,We have a requirement to update specific entitlements attribute in target. The entitlements are active directory based and they are provisioned into AD from Saviynt. We update in the connection level create-update mapping json and for new AD...
Extension attributes mapping from Azure AD to Saviynt accounts Custom attributes using Azure AD connector.-> We have a requirement to reconcile the extension attributes values from Azure AD to Saviynt accounts attributes using the Azure AD connector....
Hi,I have a use case where i need to restrict groups recon where group name starts with AWSSSO only from AAD groups. We are using Azure AD connector to reconcile the groups and using below filter at entitlement type level.But still I can see that the...
I've got a situation where a customer would like to send the value stored in a customproperty (CP) on a entitlement via update account json, if the user information is updated. This CP stores group mappings and the API used for updating accounts requ...
Hello, We have implemented AD group management and noticed that when group is already present in the AD, when it gets imported into saviynt, it is visible under Admin->Identity Repository ->Entitlements but not under Manage AD groups tile. Our unders...
Hi,I am trying to use the below condition in the technical rule. So instead of creating multiple Technical rules, I have put the condition in the object that should pick up groups where the cp20 value and user's employee class is matching.ev.custompr...
Hello,I am looking for bulk deletion of user groups.i was only able to figure out 2 ways to delete the user groupFrom UI: By using Delete Icon adjacent to the user group in user group details list page.From APIThe limitation with API is that username...
This is to check possibility of the OOTB connector features in GCPhttps://docs.saviyntcloud.com/bundle/EIC-Admin-v2021x/page/Content/Chapter04-Application-Management-and-Onboarding/Onboard-Manage-App-Beta-v2021/Advanced-Config-for-GCP-Applications.ht...
Hello,We have implemented AD Group management and below is the createUpdateGroup JSON.{"cn": "${role?.customproperty27}","objectCategory": "CN=Group,CN=Schema,CN=Configuration,DC=xxx,DC=xxx,DC=edu,DC=au","displayName": "${role?.displayname}","descrip...
Hi all,we are trying to implement Self-Service capabilities to fully manage Azure AD Distribution Lists.As we all know, Microsoft has removed the possibility of managing them via REST API, so, it is required to use the Powershell connector in order t...
Hello,when there is a enterprise role assigned to a user or requested by a user. although the user is active and the request is approved. but one entitlement of the role is belong to one of his inactive account. in this case, is that role can be gran...
Hi,We have a requirement where we need to set deafult group owner for all the groups created from saviynt and the owner is another group not user.I tried setting managedBy attribute in createUpdateGroupMapping to group value but its not working.eg."m...
For a security Group or Service Account is there a way to be able to automatically route the ownership to the reporting manager of the user who is no longer with the company.Is it be possible to leverage Saviynt such that when Saviynt receives the te...
Are there self service options available to entitlement owners, where they can see what they own and then request accounts to be added/removed. I've been trying to sort out sav role features if its possible through the Manage Entitlements screen. B...
Team,We have a requirement wherein a custom attribute in Azure AD contains the value of the group owner. We need to synchronize this information with the owner field in Saviynt. Could you please confirm whether the connector supports the capability t...
Hi Team,We want to hide a specific entitlement and are only available to request if the requestee/user has country= 'Thailand' AND location = 'Office' attributes in their profile and the rest of the entitlements/roles will be available for all to req...
Hi,We have onboarded Azure AD as an application in Saviynt. As part of the requirements, we need to import the Azure AD accounts and entitlements.For entitlement import, we need to import the following types of groups:SKUDirectoryRoleWe have configur...
Hi,we are creating a group management system for our customer and we would like to know how to limit the users that can be selected as the owner of the group being created:Here its showing all the users in the system that can be selected but we would...
Dear community,My company has the following use case:While uploading the organization flat file on daily basis, could SAVIYNT detect that a new Departmentnumber has been added and could it trigger a creation task for DL or security groups creation in...
Hi Forum,I am referring to the below link for AAD Group Creation, it mentioned I can create group via Saviynt on below path: Navigate to > Home and select > Manage Groups > Create AAD Group.https://docs.saviyntcloud.com/bundle/EIC-User-v24x/page/Con...
Hi All,We have Active Directory connection which has multiple Child endpoints (ept1,ept2,ept3.........ept10).Now for one of the child endpoint (ept4) we are using AD Group Creation and AD Groups has to create in Specific OU in target and provisioning...
Hi,we are implementing AD Group management in our customer environment and we noticed that the other attributes (Custom Property 1, Custom Property 2 etc..) don't match in the Role and Entitlements.For example this is what the Entitlement looks like:...
HiWhen we create AAD group from Create AAD Group functionality.It creates Role of type entitlement and entitlement (after task completion).Can anyone please tell me relation between role and create entitlement in database? or sql query to identify en...
Hi! I am getting the following error when attempting to add an Ad entitlement(group) to an enterprise role. THe error generates as soon as I hit save after selecting the entitlement. I get sent to a page with a red "Unknown error has ocurred" and the...
Hi,im am trying to modify the objectAndPermission.gsp file so that the AD groups selected would be dynamically either based on the requestors own GroupDN that we have imported from AD to the users customproperties.For example <option value="${request...
Hi all, I wanted to check if we can manage groups of Azure AD from Saviynt marking them with a value like "Saviynt Managed" in some custom property of Saviynt entitlement and updating them in some column of Azure AD group and while reconciling from A...
Hello, We have a requirement to show only specific groups in manage AD groups tiles. Currently, it will show up all the groups but is there any way to restrict the groups visibility? Can we use gsp customization? What are changes required for GSP cu...
We have imported our AD groups to Saviynt and use them as entitlements for applications. The owners have a role to approve the entitlements. In AD, our groups do not have owners and we do not import group owners into Saviynt. However, when I add an o...
Hi, We have requirement to create and manage AD groups using serviceDesk role. We have enabled the AD group management for the same. We can create new groups and add accounts during group creation process. Is there any way we can add/remove accounts...
AD group creation is failing with the below error message. Below provisioning comments/error message copied from Task ID. <br> Error while Create operation for Entitlment-CN=saviynttestgroup1,DC=global,DC=cdk,DC=com in AD, Exception : Error while GR...
HiWe want to start to provision GCP groupQuestion- do we use GCP OOTB connector or where do i apply the JSON for group creation? - if its using OOTB connector, then as soon as i define workflow under entitlement type, can we use this feature without ...
Hello,We have a use case where we have AD entitlements which are dynamic in AD. We want to bring those dynamic entitlements into Saviynt.What is the best way to do this? Our thought was to create roles which contain the dynamic AD entitlements and th...
We have requirement to set start date and end date only for a set of entitlements in an endpoint. We also checked that after the end date has passed its removing the users from the entitlement in Saviynt and Target System as well. But how is this aud...
Hi,we are implementing AD Group management for our customer.Looking at the create.gsp file I cant see an option to disable the Select Child Group and Select Parent Group pages that come after the Group owner selection.Is it possible to disable these ...
