We were using /createrequest API to add/remove all type of roles from user on Saviynt version 5.5SP3.06, recently we had an upgrade to 5.5SP3.13 and this API started to fail with error "Invalid role found in request.." while trying to request Applica...
Hi Team,I created the Enterprise role and made "requestable as true" but still can't see in ARS page to request.Is there some configuration I'm missing?
Hi Team, When we are trying to provision/remove a role from user by using "/createrequest" API, we are getting an error message as "An unexpected error occured" with 500 status code. API Name : {{url}}/ECM/{{path}}/createrequest I can see below...
Hello Saviynt Experts,When I assign a role to a user. this role should have an application account created but no any application entitlement entitled. I have two questions for this situation:1. How can I put such account to a role? looks role only ...
Hi,I am getting the below errors while provisioning the entitlements for AD and Saviynt. Accounts assignment tasks are getting competed but the entitlement tasks are not getting completedAD:Error while ADD operation for account-XXXX to Group-Entitlem...
Hello Saviynt Expert,I want to update an application account when a user is assigned to an enterprise role. the account attribute value is depend on the role name.To achieve this purpose, in my updateAccountJSON, I want to set the attribute value by...
Hello, Can some one let me know what would we be the issue for the below snip we are unable to add or see the the data of users when we try to add owners for the roles.We do have Admin role we do not have any privileges to edit SAV roles in version 2...
We are managing roles association with CSV File to Upload Role Association. I am not able to find an option to delete a specific child role from a parent role. For example a parent enterprise role "AB1" has 3 child roles "AC1" "AC2" and "AC3" .. now ...
We have a scenario where we need to delete the roles assigned from birthright rule.But no task is getting generated for the same.Using the below user update rule triggers when the user is updated from import we are not able to achieve that task.Techn...
The requirement here is we want to add a set of entitlements to a role and then add that role to users on requirement basis. But we are unable to achieve that through user update rule. We are able to add a entitlement/group alone to users but not a r...
Hello,Is it possible to deprovision enterprise or application roles from users that are manually suspended on the endpoint? I'm trying to figure out why task are not getting created from our analytics. Thanks
Hello,What is the intended behaviour when Deleting/Disabling role from Identity Repository -> Roles -> Delete Role.Should it remove the role from all of the users and keep the entitlements with the user and accounts OR Should it create remove access ...
Hi Team - Please le us know if the below requirement is possible.Is it possible to add the permission to the user role to see requests submitted for you by your manager?
Hello,Can someone help me understand purpose of Dynamic Attribute present in Enterprise Role? Where this attribute appear while requesting Enterprise Role ? How this attribute value be passed for provisioning JSON's? Since Enterprise Role comprises ...
So in our use case, other than normal LDAP groups.. client has list of actions to be taken based on a role provided. this mainly because the unix authentication is managed by LDAP. For example if I assign enterprise role "host1" to the user, it shoul...
Hi Team,The application use case is that if user has a specific E1 (Enterprise Role) then E2 and E3 should get auto-hide i.e If one role is selected then another cannot be selected.Any views?Thanks
Hi Team,We are trying to provision Service Accounts into an Enterprise Role, But Saviynt is treating the request as a New Account request and not picking the tasks.Please let us know how we can provision the Service Accounts to the Roles.Thanks & Reg...
Hi, Can someone let me know hoe to use Datasets in SAV4SAV Rest connection? We can use sql queries in SAV4SAV DB Connection in user import. However, since SAV4SAV DB is deprecated, we need to replicate the same in SAV4SAVREST connector in JSON format...
Is it possible to baseline a birthright role for users we have detected match the entitlement list through recon? For example, we have birthright roles for salaried versus hourly employees, and when you move between statuses we successfully remove an...
We have created a Role (A) which contains child role B and C and have assigned the role A to a user when the condition City contains "BBSR", it will grant the role A and the child entitlements associated with it.But when the city name is updated, it ...
Hello everybody!We are configuring Jira connector per reconciliation ImportAccountEntJson, but we are lost. We know the logic of users-groups but we cannot understand the part of projects-users-roles as we want to connect also users and projects. if ...
Hi TeamWe have one Application that only supports a single role for each user, so we are using Entitlement Type's request option as "Drop Down(Single)" so that we can restrict the user's RequestCan team help me to know, what extra configuration I sh...
Hi all,New to Saviynt, and am attempting to create a simple enterprise or application role. I complete the role details page (select role type == enterprise or application) and then next try to add entitlements on the 'entitlements' tab of the role c...
Hello,We have a use case:When a new user requests access to a specific group in application x, they should automatically be provisioned an account on application y and z and get specific groups on those applications. How would we go about doing this ...
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
Team,Is there a way to get list of users who qualify for BR technical rules based on the basic or advanced conditions that are configured in rules.For example -User attributes - state = test, country = abc, location = test1BR Tech Rule - a.state=test...
Hi,We have a requirement to restrict the end-users to request only a specific number of enterprise roles from the "Request Access for others" tile. For example, we want to restrict the user to select ONLY 2 roles out of 100 available enterprise roles...
Hi,So we have a different type of user (Customer/Supplier) whose email needs to be generated in a particular way, however when we include it in the email generation query under global configuration it throws the following exception:Query : case when ...
Hi everybody, I am trying to create different roles but I came across a couple of problems and I cannot find an answer anywhere. Here are the questions: 1. When I am creating roles, I add also an Endpoint to them. In that case the role goes to COMPOS...
When configuring a Campaign, we have the option to select a default Certifier and Reassignee ? Is it only limited to a single user for both options. The Campaign Owner field within the Campaign creation allows for a group to be selected and for both ...
In my use case I need to assign multiple enterprise roles to a user as birthright access based on user's job code. So for example if user's job code is "001" .. I need to assign role "A1", "A2" .. etc .. but for some other job code this set of enterp...
Hello,We are trying to create users using create user form. In creation flow, we are assigning a Enterprise Role to the ID.1. The user request is auto approved and2. Enterprise Role request is tagged with Approval WorkflowHowever, when we feed in use...
Hi,we have a requirement that user should be able to request pre-approval for emergency access roles. When a user has pre-approval for an emergency access role, then they can request the emergency access role for limited time with auto-approval.We're...
Hi,In the Technical Rules page, we need to be able to assign Role to the user based on a few conditions rather than the direct assignment of entitlements/accesses.But in the Object Type drop down, we can only see the option of Enterprise Roles. Snaps...
Hi All,I need some help regarding role owner actually I created one role and from role owner tab I click on actions button for adding role owner but it is showing like below-In the above screenshot you can see no search is showing then I how can I s...
Hi,We need to disable Exchange account for a user on termination. However, that is triggered via powershell script for license disablement on exchange.We are able to pass the http params via update account json, which includes the username of the use...
Hi,We have a requirement to generate usernames in sequential numbers for various categories of users created via Created User Form.We have five categories of user, of which 4 categories of users we are generating Category Code (from dynamic attribute...
Hi,I am trying to populate a field of users where multiple email users could be selected from the system in the dynamic attribute of a create users form.I am using Attribute Type as : Multiple select from SQL QueryValues : select email as ID from use...
Hi,We have around 18000 departments which we wish to populate in a dropdown in the create user form from a dataset table that we have imported.However, dataset gives us a threshold of only 10k lines of entries.Any workarounds for this use case?Can we...
Hi team,I am trying to create a role from UI, when I click on create getting 'Invalid token' error popup. Could not find anything in logs.Please suggest any configuration needs to be enabled.Thanks,Smitha
We are trying to write an email generation query under global configuration. However when we upload the query it throws an error as "Operation not allowed as you are entering a value that resembles or contains script code"Attaching a part of the quer...
Hi,We have a requirement to relaunch a campaign for all users whose campaign response was ' No Response'.We have selected to revoke tasks for certified users on campaign expiry and hence, for users for whom 'No Response' was selected, we need to rela...
Hi,We have a requirement in which the companyname of the user being created should be equal to the company name of the requestor via the Create User Form. However, the manager to be shown in the dropdown should belong to the company name select, whic...
Hi,Is it possible to route the approval to individual entitlement owners instead of the role owners in an approval workflow when the user is requesting an application role?Based on freshdesk documentation I tried using a custom assignment with query:...
Hi,We have a requirement to generate PIN number for external employees via either SAV to SAV or via the Create User Form (Dynamic Attributes) (Recommended)Use Case :If an employee joins a company, his PIN will be generated based on [CompanyCode][Maxi...
Is there a way to assign users an entitlement without it being part of an enterprise role (using ARS or another method) or is adding the entitlement to an existing or new role the only option?
Hi all,I need information how we can request for application role through ars.I created two two role under that role in entitlement tab I added the groups which is associated with those role then from endpoint role type select request option as table...
From the docs regarding technical rules and forum posts, it seems like a technical rule and its advanced queries can only access the users table.We have a requirement to assign an enterprise role (containing application entitlements) to a user only w...
Hi team, Wile creating new role we added entitlement and sent it for approval and getting below error.We also tried auto approval and also user is having ROLE_ADMIN savrole still we are getting below error Can someone help ? Regards,Supriya
Hi All,Need information how to provision multiple AD group if we select single group from ARS based on that single group we have some other dependent group that needs to provision when we select those single group.As an example I am selecting A grou...
