and more in a single search tool across platforms. Read the announcement here. |
Hi Team,We are integrating SAP ECC with Saviynt using the OOB SAP connector and would like to know how to perform the add access and remove access process. in the SAP connector we dont see the Add access or remove access json. All we see is CREATEACC...
Hi everyone, I'm having a hard time understanding why we need to set up an on-prem server to manage a cloud feature (SharePoint Online) via Savinyt (SaaS). Connector Architecture (saviyntcloud.com)We would like to be able to manage access to SharePoi...
Hi Team,There is Rehire UseCase for sav4sav REST via user update rule configured, but New Account Task is not getting created for Saviynt endpoint after the rule is getting triggered for the respective user. Thank you in advance!
Hi Team - I have a requirement to set access enddate manually for entitlements assigned to accounts. We have implemented temporary access to the entitlements already, but to impose this on existing accounts, we need to set the enddate to expire their...
Hi,We need a custom sav role to view only user details. I tried to create one but I am only getting "access denied" while clicking in the admin tab.We have a basic sav role "role_user" and tried to create a custom sav role to view only user details. ...
Hi ,We have a CSV file that contains a group name and its associated another group for instance group A is an entitlement and group B is the associated entitlement to group A so that if a task is generated for group A , group B should also be auto as...
Hey,I want to change the username for almost 200 users, how can I do in bulk action ?Thank you.
Hello,Is there a way to get change history details for roles in EIC?Thanks
Hi Team,We have a requirement from the customer, where the customer wants to change the deleted account's time stamp from IST to EST format.How can we proceed?Regards,Dayal
Hi Team, We want to change the label for attribute while uploading the user via CSV import. Where we can make this changes in the Manage Label I am not getting exact attribute name. Instead of 'Customproperty5' we have to show here 'ActionType'
Hi Team,We have to add users to the AD group, I don't see separate JSON for the same.Do we just need to add "{“conf”:[{“ADDMEMBERTOENT”:“TRUE”},{“ADDUSERTOENT”:“TRUE”}]}" value in the endpoint?Thanks
Hi Team,Can we configure attestation campaign notification email templates at endpoint level?If yes, could you please let us know the binding variable.Thank You
Hi Team,We are using the below mentioned logic for account expires in the update account json. But this logic fails if both termDate and enddate is null. Can you please help us with a logic wherein it will update the account expires attribute to '0' ...
Hi Team,We are using title attribute in the create and update account json as mentioned below. The requirement is if customproperty 54 and customproperty 25 not eqaul to null then it will concat custompropert 54 with On loan/ Rotation/Secondment/Acti...
Hello Team , We have REST cyberark connector which holds safe names. We have another domain AD connector which holds AD groups. Now we have received Safe-AD groups mapping. So the expectation is people will request for safe only , but in background b...
Hello, We have two AD connections; one for regular user accounts and one for admin accounts. We are wanting to map the accountID of an owner on the regular AD connection to be the owner of the entitlement on the Admin AD connection. Is there a way to...
Hi,I was looking under Data analyzer to get the attribute for queries that we specify under 'Advanced Campaign Configuration, but could not find any.Under 'advanced campaign configurations', we need a report that gives us the 'entitlements query', Is...
Hello folks, hope anyone can help with the below requirement.Context : Email in Access Approval WorkflowRequirement : Display all requested roles to Role Owners to ease their approval decisionUse Case : We have configured an approval workflow with 2 ...
Hi Team,we have requirement of sending email notification with analytic report generated time.We are unable to receive any email notifications with the below paramenters.1. ${date}2. ${ANALYTICSDATA.'START DATE'[i]}3. ${ANALYTICSDATAMAP.get("START DA...
Hi,We have a requirement, that whenever the Plant (cp20) of a user is updated, the manager of the user should be notified.Hence, via user update rules we can Notify as an email, the new value of cp20 in the email template. Is there a way by which we ...
Hi Team,We want to import "Member" attribute from AD and not MemberOf attribute from AD, has anyone done the same configuration for AD connector?Thanks
Hi Team,We have a user assigned to a particular group and only that group we are currently importing into saviynt(by providing groupbasedn with group DN)what we have observed when we trigger the account import first, we could see entitlement mapped t...
Hello,We are attempting to implement an email template that displays information about a user based on any null values they may have.e.g.: if (user.costcenter == null) print "[something1...]" if (user.employeeID == null) print "[something2...]" if .....
Hi all, I have two separate environments: A& B I'm trying to export a package from Environment A to Environment B using the transfer directly function. I've been following the steps to configure a target environment laid out in this guide: Chapter06...
Hello Team, I would like to implement the framework in our IGA portal. Since I'm relatively new to this field. It would be of great help if you can provide me with the step-by-step guide or some documentations which can help me get started.
Hi,I want to update connection Json for Soap & RAAS api, but it was encrypted. When I read the forum it says I need to enable Rest Questionary option from Global config. I enabled them but still I dont have an option to decrypt. But I can see the op...
Hey allWe have a requirement of assigning a SAV Role for PAM to several users but the assignment needs to be done based in a specific Enterprise Role, preferably if the SAV Role can be inside the Enterprise Role as an EntitlementRegarding this, I can...
Hi ,We are getting names from source as for instance ( Fernoldjr. , O'connell etc.) which then creates email as in firstname.fernoldjr..com To escape the special characters (',.) below is the preprocessor I was trying however , I was getting syntax e...
Hi ,we have a requirement where we are getting a csv with information of an attribute and its particular group Can we use it as part of a Dataset and call it in the request form for example attached is the file where we have a country and its associ...
Hi Team,We are currently using managedBy to retrieve owners from AD. We have two different types of IDs in AD and have two different endpoints to manage those lets call endpoint A & endpoint B. All the group owners set in AD are IDs which beloing to ...
hello we have a saviynt rest used to create saviynt account, and update username etc.. the access/refresh token was platform generated via webauth service and it expires every 1 hour/3600 hours. Is there a way to keep extending it indefinitely? if so...
Hi Team,Can someone cofirm if we can integrate D365 CE using the OOTB D365 connector or not?Regards,Prashant
Hi All,I have an AD Connector where we mentioned accountname rule & sAMAccountName to provision as - ${user.username.toLowerCase()+'admin'}And the provision of the account is working fine and the sAMAccountname also displaying like Ex: "cjackadmin". ...
Hi Team,Can we apply a approval workflow for service account password reset request?The ask is when service desk submits a request for password reset for any service account, it should go for service account owner approval. Please suggest how to achi...
What query do i need to generate access report in Saviynt intelligence tab for the following field out put: EMPLOYEE ID LOGIN FULL NAME DEPT NAME ENT ASSIGN PROV MECHANISM ENT ASSIGN CREATE ENVIRONMENT PROVISI...
Hi Team,we have a use case where we have to make business justification mandatory for AD groups which is around 3000, I know we can make sys critical as High... but doing so for 3000+ groups .. doesn't seem feasible even with CSV, do we have any othe...
Hi All,We have a requirement where we need to call a custom JAR inside the workflow. I am aware that we can use the 'Action Event' block to achieve this.However, I also need to pass the 'requestkey' as argument to the JAR so that I can perform some o...
Requirement:Implement Saviynt app for servicenow.Achievements:Installation of saviynt app for servicenow is done properly. All identities, accounts, entitlements and applications imported to saviynt app for servicenow.Challenge:I tried updating user ...
Hi,We require to generate a unique 9 digit numeric number prefixed with C_ for users coming in from AD as AUTH source. What is the best practice to do this? I read some posts that mentioned the use of Register user rule and inline pre-processor. I tr...
Hi everyone,We're currently working on integrating Active Directory using the ADSI connector, and we have a requirement to populate extensionAttributes in AD. However, we've encountered an issue where the AD account is being created but fails to popu...
Hello,in the connection for Active Directory, in groupImportMapping, is it possible to add conditions to the mapping?For example, I would like to import the description from AD into entitlement_glossary in Saviynt, but only write it in Saviynt if the...
Hi All,We have a scenario where we want to disable the accounts instead of removing it from AD domain when revoke task is created via campaign.I understand that disable task won't be created but what if we use something like below -{"objects": [{"ob...
Hi Team,There is a client requirement for users' customproperty attribute label change so I changed customproperty13,customproperty14,customproperty15,customproperty16 as Alias, Extension,Role Name, and FEDERATIONID label name and It is also reflecte...
Hi, I wanted the course information to be stored in single coloumn using comma seperated values . How can I acchieve this in UserImport JSON for REST connector. {"collection": [{"Company Code": 484174,"Company Code Desc": "XYZ LTD","Employee Number...
Hi Team,the Endpoint access query needed to not show an app in ARS if the user belongs to XYZ Entitlementbelow query is working but it applies for all userswhere $ {requestor.id} in (SELECT distinct UA.userkey FROM ACCOUNTS A, USER_ACCOUNTS UA, ENDPO...
Hi,We have an email template to notify the owners about all the organization related attributes update.using ${customerhistory.<attrib_name>}, I am able to retrieve the current value.Now having this solves are concern to display org name and other at...
Our organization has a Technical Rule that assigns the role ${user.jobDescription} whenever the user's Job Description is updated, and uses the condition advanced query a.jobDescription IS NOT NULL. This is triggered by a User Update rule that monito...
when the user requests access to the endpoint in Saviynt then while requesting can we see the existing access in the UI while requesting for self or requesting for others?for example,when the manager requests access to its user then he selects the en...
Saviynt has a plugin for ServiceNow. It comes with few default forms to represent data for ARS requests.However the ask is to manipulate the data in representation of the form.Question 1: Filetring inactive entitlements not visible or not to display ...
Hello Team,We have successfully onboarded the Oracle Fusion application and mapped the accounts with the Roles.Currently we are in the process of identifying the logic to map Security Context and Security Context Values to the Roles as a child entitl...
