Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners Click HERE | EMEA/APJ Click HERE |
When we removed one of the entitlement from an Enterprise role, we noticed that users are gettings removed from the Role.The expectation is, when we remove an entitlement from the role, only the entitlement should be revoked from the users present in...
After creating custom SAV roles, the users are unable to see any roles. Getting access denied error. What are permission and actions to be given to view roles.
Hello, We have user update rule configured to transfer ownership to N+1 when the user is terminted. we have noticed wired behaviour for one of the role it get assigned to admin. could you share cases when the role will be assigned to admin?
Hi,We are creating roles based on the organizational hierarchy, and each has a child role.For example, if you assign a user the Role 'XXX-AAA-BBB-CCC-DDD', the user will have the entitlements 'Project_A' and 'TestADDGroup002' added. The technical rul...
We have created enterprise roles for entitlements to request access in our saviynt environment. There are some situations like user's accounts added to entitlements/groups directly in target systems. So we would like to detect them via report and ma...
We have a use case where users should be able to manage roles they own and add or remove entitlements from the role. But there should be a limitation which entitlements they can add to the role. Currently when user starts managing a role and clicks t...
Hi,If a user has more than one account for an endpoint, and the user is added to an enterprise role, currently Saviynt assigns the entitlements of that role to all the accounts of that user in that endpoint:- Can this entitlement assignment for enter...
Hi Team,We need to create a approval workflow for role owner.Scenario: We have created few roles in Saviynt and they are set to auto approval. We need a single level approval workflow to be set for it where the approval gets triggered to the role own...
Hii,I want to assign the enterprise role based on the user's city attribute without using technical rule. Please let me know if is there any alternate option for it.E.g. 1: If the user's city is 'Delhi' then the enterprise role "Role for Delhi" needs...
Hi Team,We have a requirement to implement the roles based access in our environment. We need to understand what is the "risk" option meant for and what is its significance?Please refer to the attached screenshot.
Hi Team,We need to implement role based access in Saviynt, please help us with the answer to the below query.1. By increasing the risk from low to medium/high, is there any impact to the level of workflow for role approval? Example: If i increase the...
Running into issues manually updating the primary certifier role owner, getting "Only one Primary Certifier allowed", even when there is no Primary Certifier defined.Figured I'd give a try uploading associations, based on info from: Solved: Role Up...
Hi, I created a report to deprovision the following roles:(referring to https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter17-EIC-Analytics/Managing-Analytics-v233-Later/Managing-Actionable-Analytics-Controls.htm Report Query =...
We are experiencing issue with filtering user accounts based on their prefixes ("sa-" and "ea-")we need to filter user accounts where the u_account_name starts with "sa-" or "ea-"ImportUserJSON{"connection": "acctAuth","successResponses": {"statusCod...
Hi,Is there any way to show role-entitlement mapping to end users in a read only view? A view where users can filter by application name, entitlement name etc. would help them identify which role to request.Can Dashboards be used to achieve something...
We are updating entitlement through entitlement type role from postman(API) like owner, display name etc. but when api call happen it directly update the role field with out creating any update task for entitlement updation.We tried similar updation ...
Hi All, We have a specific requirement in Approval process as below:We have an endpoint which has entitlements and application roles as requestable component in ARS. Application role has no owner mapped, it contains multiple entitlements having owner...
I am not able to replace a primary Certifier for my roles. Here are the steps:I remove the current Role Owner.Then I add a different user as a the Role Owner.I try to set the rank to Primary Certifier, but I keep getting a message that role can have ...
Hi everyone, I am currently working on adding a start and end date to the Access Request. Specifically, the requirement is that when making an Access Request via the "Application Tile" both accounts and roles should be assigned in the same step. Thes...
Hi Team,When we are requesting for Enterprise role which has entitlements from 2 applications, none of the account exists for user. Our expectation is when a role is requested it should provision account and access via that activity itself.The issue ...
Hi All, We are trying to use the Tag Search Field for Enterprise Roles to filter the roles based on the tags field selected while requesting access. The tag field values are added in customproperty1 attribute of Enterprise Roles. Below are the appro...
Hi All,For one of the application, we are switching from roles to entitlement approach.We need to remove entitlements and users from the existing roles because those roles are no longer used in Saviynt. Is there any way we can un-link all the users t...
Hello,We have the requirement to create one single request (opened from ServiceNow) that is able to ask for two or more entitlements related to a Role.The objective is to avoid that user must open more than one access request in order to ask all the ...
Hi everyone,I need to implement a report in Saviynt that gets sent to the IAM coordinator group and relevant owners when a person with specific roles (Owner, Approver, Fulfiller) terminates or leaves the company.Scenario:Roles: Owners, Approvers, and...
Hello Team, Hope this post find you well! We're trying to import Roles, to be specific we're trying to import Enterprise Role using the CSV file. We have given the entitlement value in one of the columns but once the role is imported it's not showing...
Hi Experts,Need help on a use case where we need to provision the Application name to the target where the app name is the part of the entitlement value being selected when a user raises a role.For Eg: If AB:CD:EF is the entitlement value, then AB is...
Hi,I require role to be removed from the users automatically on transfer. If they transfer twice within 30 days, we no longer have the effective date of the first transfer so if there is a rule to remove old roles after 30 days its going to wait 30 ...
Hi,While configuring role owner campaign, is there any way to avoid the roles which are assigned as birthrights to the users? Thanks,Harish
Hi team - We have a customer that associated enterprise roles with a variety of accounts whie the accounts were inactive during a cutover. If we want to retrigger the entitlement tasks that may have been missed for the accounts that were inactive, is...
Hi,When creating an AAD Group, to get the group owner, we can use the EL : ${allOwner}This will gibve all group owners azure account ids.But how to get these group owners username ?
We have a bunch of enterprise roles some of which have a hierarchy of roles. There is criteria based on which a user gets provisioned to the enterprise role hierarchy. This hierarchy of enterprise roles can change based on the user's HR attributes su...
Hello,I have few below queries regarding emergency access roles,We need a way to limit the emergency access to one role per request per person,How use a request counter in workflow if-else to count the number of roles requested by user, and if number...
Hi everyone,Context: We want to use Saviynt to manage users with multiple AD accounts, for example, users who have a regular user account and an admin account. So far, we have created a new connection, security system and endpoint to manage these acc...
Hi folks,We are integrating with SAP HANA database which has reconciled multiple entitlements with the same entitlement_value.The entitlements are effectively different as they target a different schema.However, I want to import Roles and associated ...
Hello ,How can we resolve this issue? We are encountering a problem when trying to pass our roles from composing status in the version tab. Specifically, the enterprise role is getting stuck in "pending approval" status, and we cannot find it in the...
Hi Team,I'm working on role import via csv sheets consisting of around 1300 enterprise roles with child roles and entitlements. Later i will add role owners via csv upload and the requirement is to add the primary and the secondary certifier for all ...
Hi All,Application endpoint is connecting through REST connector.We have to recon the entitlements/group from a single API. The response of the GET user API contains the group information also and we do not have a separate API to import groups, pleas...
how to modify the SAV role so users can manage only the roles of the endpoint where they are part of their admin usergroup
Hi,We have a set of application roles that have a few entitlements mapped to it. Now as part of the cleanup activity, I would like to remove one of the entitlements from them. I know we can prepare a csv file that contains the mapping of role-entitle...
We have roles and responsibilities that require end dates. We do not want end dates this far out for roles or responsibilities that require end dates. Are we able to automatically set the end date to 1 week? if yes please provide steps
Hi,We noticed that few roles are mapped to suspended accounts instead of active accounts. Due to this when try to raise a request from ARS we are not able see those roles in ARS page. Also in the user access certification these roles are not visible ...
How is the primary group updated for Unix accounts? The Unix connector documentation says to use Saviynt Roles (shown below). I cannot correlate this with target unix system on how the Saviynt Role is mapped to Unix primary group. Requesting for any ...
Hi,We are working to setup our joiner workflow and we have 130 birthright roles.Our requirement for the roles is to check the user has an active AD account and/or active Azure account and/or active Okta account assigned to their profile before assign...
Hi everyone,I am working on Role Modification Workflow where I want to send the approval to the role owner with rank 1 using custom query. I tried using the below query but it doesnt seems to work as the approval is routed to admin always. SELECT ro....
Hi. I am trying to use the role associations import functionality to create some enterprise roles with AD entitlements assigned to them. The file attached gets the role created but i keep seeing the following error when the entitlement attemps to b...
We tried importing new roles onto a fresh new 24.4 tenant. We first configured an auto-approval workflow under Role Modification Workflow. When trying to apply role-entitlement association, all objects ended up in Composing state and required to be m...
Hi Team,We are using the enterprise Role to provide access to 2 points.We encountered a situation where application access is already removed but the role is present in the profile.Is there a way, I can remove the role from the user profile If I use ...
Hi Team,We have created 4 different enterprise roles. The roles have to be visible in ARS page based on employee type and requestor's SAV roles.We have tried the below query for employee type:and (substring_index (rl.customproperty1,',',1) = (select ...
Hi Team,We have successfully integrated the Oracle Fusion application using REST connector and we are able to import the Account, Roles, Security Context and Securtiy Context Values. Also, we have sucessfully mapped the Accounts to Roles. Here we ar...
Team,When a Remove account request is submitted from ARS, only Remove Account Request is getting created and sent to approval process. Here it is expected to create Remove Access also along with Remove Account. FYI Account has two roles.In endpoint I...
