and more in a single search tool across platforms. Read the announcement here. |
Hello Everyone, I am trying to upload accounts and their entitlements using file based schema approach, the job is running successfully and the entitlement type is created in the Entitlements Hierarchy of the accounts as well but when I am clicking o...
Hi All,I am trying to implement concept called 'Role default approver' in Global Config -> Roles.Any link on this how it works? few questions:1. How the request go to Default approver if role owner is not available?2. Can I redirect the request to De...
Hello, I have the Job below that is failing now i dont't know why. I use this Job to update the status attribut for external worker.The error i get :ImportUserJSON IN Saviynt For Saviynt connexion : Anyone can help please? Regards,Ray
Hi,I have a similar scenario as below mentioned use case where restricting roles based on Employee type: Use case of Request Roles Query (saviyntcloud.com)It works fine if user requesting for self. What if requestor is a 'Contractor' type and request...
Noticed revoke requests not generating even when user fails to meet Tech rule. we first added few users to role and then changed attributes to one of user to fail the condition. After running detective job we noticed no tasks generated for revoking a...
Hello,Is there a way to get change history details for roles in EIC?Thanks
We have duplicate enterprise roles. There are certain roles which have users and certain which don't but the roles have same name. We have fetched the details which roles have users and which don't along with the Role keys.Now we want to delete the d...
Hey allWe have a requirement of assigning a SAV Role for PAM to several users but the assignment needs to be done based in a specific Enterprise Role, preferably if the SAV Role can be inside the Enterprise Role as an EntitlementRegarding this, I can...
Hi there - We are in the process of aligning Saviynt to a role framework at a customer that will has approximately 17K users and will have 1.5K roles based on a job code parameter that is being ingested from the authoritative source. We have a scenar...
Is it possible to assign Enterprise Roles based on SAV Role? we want to design some enterprise roles and auto assign them to users based on their SAV Role. can you let me know if this is even achievable
We try to get an email when an Enterprise Role is assigned. We use the Global Config Role Owner Assignment Template fieldWe tried : ${owner.email}${assignee.email} <-- fails goes to the Manager instead of Role Owner ${roleOwner.email} - ${roleowner.e...
We have a BR role running on a tech rule. we created test identity that meets logic and has account at endpoint (AD) after running detective job to collect user to role we noticed new A/C Add access tasks for existing users in role and no new task ge...
Hello, I want to send the request to the manager of the manager if the first manager is inactive.I put this workflow below and when i test it, when the first manager is inactive, the approval request is going to admin admin instead of the manager of ...
We have some cross functional teams (members of these teams do not have a common attribute) we would like to create a user group for these members in Saviynt and assign roles to User Groups but not sure if this is possible. is there a better solution...
Hello,There exists many duplicate enterprise Roles in database. But there are users in some of the Roles and not in the others.How to find out which of the roles has users and which do not?Is there a way to generate a report that shows the roles whic...
We noticed that tasks are generating even if a role is in deleted/inactive state. Ideally we do not detective job to generate task when role is deleted but the rule assigned is still active. Is there a solution for this?
Hi, We are facing an issue where Role Ownership Transfer is not working when Advanced query is used in User update rule. When we use simple condition in user update rule like below, it works as expected and replaces role owner on user disablement. bu...
I have a situation with a client, where we are dealing with movers. So, for example if an employee changes his/her job - we want to give new access and trigger a certification, but this certification should only be triggered after x number of days. I...
Hello Team,We have a requirement to know the Identity Roles information when provisioning accounts.How can we access the identity role information when constructing createaccountjson?Saviynt REST API can return roles info for a user. Can we call the ...
Hi,We have a list of nearly 2000 users and we have to assign enterprise roles to them. So please can you let me know how can I add those roles to all the users at a single go.Thanks and regards,Soumik Das
Hello All,I am trying to upload Enterprise Role through UI , Its failing with "red screen error - unexpected error", I have attached csv file as well, any idea what i am missing ?Logs=======2024-03-27T22:43:10-05:00-ecm-services.RoleversionService-ht...
I've found previous posts on this topic, but I've not seen an answer.For some Job Roles in Oracle Fusion, we also require a Security Context to control data access. So, for example, you might have the "Buyer" role but only for a specific Business Uni...
Hi Team,We are seeing an below issue in 23.12 version.Let's say Entitlement A which is belongs to App A is part of Enterprise Role A(Which is dedicated for to give the access of Entitlement A) and Role B ( It consists of many entitlements for diffe...
Hi,We have a requirement to use the roleQuery attribute in Saviynt getRoles API to fetch all enterprise roles except the inactive ones.I tried something like "roleQuery": "r.status != 0" but it still returns the inactive roles from the system.Any hel...
Hican anyone please suggest a way to filter role based on accounts presence?For Example:If user has account in an endpoint assume endpointkey=95, then show the firefighter role(XYZ).also, can we use Requestee in the filter rather then currentUser? Re...
When a user requests a role, and that role has AD entitlements (for eg), Saviynt provisions the entitlements to ALL accounts that a user has. Is it possible to restrict it only to the primary account.
Hi,We have an application where user can have only one entitlement . We have roles created for the application and added the entitlement. Now when an existing user is rasing the request for a new role (which has entitlements) it is getting provision...
Hi,I'm integrating a REST based application and for that the pagination configurations have to be passed via BODY.All the pagination examples available are ONLY related to configurations passed through Query Params.While searching, I found another po...
Hi, I'm working on a REST integration and have the following Import Account JSON. Previously I was able to run both account and access imports successfully. However, during the account import, I wasn't able to map the corresponding entitlements to t...
I've got a situation where a customer would like to send the value stored in a customproperty (CP) on a entitlement via update account json, if the user information is updated. This CP stores group mappings and the API used for updating accounts requ...
Hi,I have the below requirement on access request1. Provide immediate access to users for a specific period of timeI was thinking about Emergency Roles, I created an emergency role and was able to add and revoke access for a specific period of time.2...
Hi,Has anyone successfully implemented role mapping for application roles?We were trying to see if it is possible or recommended to create a parent role which is an application role which uses endpoint123. Then create a child application role which u...
Hello everyone, We want people to ask a role where there are 2 entitlements of endpoint1 and 1 entitlement of endpoint2, with the role Saviynt creates also new accounts for people who don't have an account on these endpoints.But the problem here is t...
Hi All,I have sql query where i have use group concat to add all those entitlements that i want to give a access to the user but i think group concat doesn't work can you please help me with the query.Query: SELECT U.USERNAME,U.USERKEY AS userKey, A....
Use case 1:We noticed that when the Request-Option for Entitlement Type is set to None under Endpoint, any entitlement that is assigned as part of Birthright rules via Enterprise Roles is not being assigned (add access/account tasks are not created ...
Hi team - We have a customer that will be importing over 2K roles with multipl entitlement associations. This will result in the file being 100-150K rows. Does this capability support and import that size? I get a Gateway Timout error with a small fi...
Hi,What all activities are captured in Incremental import of SAP?we are using the below tables for incremental import in the same order mentioned in documentation. USR04, USR02, TSTC, TSTCT, AGR_AGRS, AGR_TEXTS, AGR_DEFINE, AGR_USERS, USORG, UST04, A...
Hi Team,When an Add Access is executed from SIGA, It usually checks if user's account has entitlement mapping present, if it is already present, the tasks completes with status no Action requried.But recently I have observed even if the user had Acc...
Hello, We have created new roles, but they went into composing state. So, in order to delete those, I have updated the below setting in global configurations, still there is not option to delete the composing roles as it is only deleting the active r...
Hi Team,We are trying to add application role to user via postman it says success. But in the ARS we can see request is rejected on the UI. And in the view details it says auto approved but it doesnt add the user to role.Please refer the below screen...
As we review our system's policies, a key question arises: should birthright enterprise roles be requestable, or is this privilege reserved exclusively for roles designated for request via ARS (Automated Request System)? Your guidance on this matter ...
For example - There are two Roles in SIGA - RoleA and RoleB. RoleA and RoleB both have an entitlement named as entitlementA, A user holds both the roles in SIGA.When user raise an access to remove roleA , SIGA triggers a task to remove Access for ent...
Hi All ,I am trying to provision the account request from ARS to one of the SAP applications. The requests are getting submitted and pending tasks are getting created. but the provisioning job is getting stuck and is not picking up the pending tasks....
Can you please share any documentations related to Parent-Child role set up in Saviynt? Also please answer the below questions.Scenario: Currently there is a legacy IGA arrangement available to establish a parent-role relationship in existing access ...
Hey All,We are trying to find a way to display what Entitlements are eligible for DirectoryRoles. Currently, we have the import working to show what accounts are currently assigned to our DirectoryRoles. In our Azure environment, we currently have it...
Hello,We are creating new roles in EIC version 23.11After creation, the new roles are going into composing state and does not come to active state even after many hours.We have also checked the attached workflows in the global configurations and remo...
When we click on Home Page – Start an Access Request – select Myself – Role , list of users will be displayed on the screen instead of Roles, [as the selection was for Self, we need to have role details and not Users detail] Is anything related to Ro...
Hello,when there is a enterprise role assigned to a user or requested by a user. although the user is active and the request is approved. but one entitlement of the role is belong to one of his inactive account. in this case, is that role can be gran...
Hi.We have a specific environment and need to modify workflow accordingly. Here is the info.1. Details- Endpoint 'A' has two types of entitlement values - Application, Roles.- Application type entitlement has 'Infra' or Null values in customproperty1...
I want to create an enterprise role by using API and do verification by using PostmanPostman body==={ "roletype": "ENTERPRISE", "role_name": "createEntRoleAPI103", "requestor": "macadmin", "owner": "M12827005", "endpointname": "Azure A...
