Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Forum Posts

Resolved! Import Coupa Roles/Entitlements

Hello, my team and I are trying to pull in roles from our client's Coupa environment to add as entitlements in Saviynt. Because Coupa has no roles endpoint, we are using a single user as the container for all the roles to be imported and mapped. Howe...

LeeEG by New Contributor II
  • 498 Views
  • 5 replies
  • 0 kudos

ARS in v24.1

Hello everyone, After updating our tenant to 24.1 we are seeing two options in the ARS page; Application and Role.This option 'Role' is visibile even though we don't have any roles to request access. Is it normal or a bug? thanks,Nazli 

Naz_A by Regular Contributor
  • 191 Views
  • 3 replies
  • 0 kudos

Run User Analytics

Hi Saviynt Community,Is there a way to run analytics over all users to find patterns within their attributes?Example: running a search to find all users that have the same local office assignment or running a search to find the top sub groups for use...

JFrance by New Contributor II
  • 91 Views
  • 1 replies
  • 0 kudos

Resolved! Validate if possible to recertify Rules

Hi,We have a requirement in which technical rules assign enterprise roles dynamically. We need to check if the technical rule can be certified in which request to certify is sent to the technical Rule owner.Another requirement is when a technical rul...

dkumar by New Contributor III
  • 192 Views
  • 2 replies
  • 0 kudos

Tech rule not working

Hi,I have created a technical rule for customisation, I have followed the correct steps to create it. However it is not working after user update meeting the tech rule condition.Thank you,  

Bsah by New Contributor
  • 406 Views
  • 7 replies
  • 0 kudos

Resolved! Role modification workflow

Trying to create role mdofication workflow where we need to get the role owner . Here am using the custom assignment as we dont have any hooks for role management workflows.I have tried using the select ro.userkey from role_owners ro,roles r where ro...

trivi by New Contributor II
  • 647 Views
  • 11 replies
  • 0 kudos

Resolved! I want to assign a user who already has an Entitlement to a member of the Enterprise Role

Hello guys, We are currently migrating to production.We created roles for each department after linking the currently running AzureAD and Active Directory accounts to users.Therefore, each user has the Entitlements required for each department, but i...

JohnDoe by Regular Contributor
  • 606 Views
  • 2 replies
  • 0 kudos

Resolved! How can I create a role using the REST API?

We're rather new to Saviynt and operate an application that defines Business Roles and assignes Entitlements (Technical Roles) to them. We treat this as an authoritive source for all role definitionsWe want to push these roles from the Business Role ...

ThomasL by New Contributor II
  • 454 Views
  • 3 replies
  • 0 kudos

Upload Role with csv using Upload Role Association Template Field Priviledge not correct mapped

We have the following issue identified and want to know if it is a bug or if there is a solution:In the upload template we have added the following columns:ROLE NAMESECURITY SYSTEMENDPOINTENTITLEMENT TYPEENTITLEMENT VALUEROLE TYPEROLE STATUSDISPLAY N...

Katrin by New Contributor II
  • 772 Views
  • 5 replies
  • 0 kudos

Way to Bulk Delete Enterprise Roles ?

Hi,I am looking for methods to bulk delete the enterprise roles (via file upload) which are no more needed (roles created in dev or test environment, etc)I have checked the options available in role upload via UI, could not find anything to delete th...

Srikanth by New Contributor
  • 355 Views
  • 5 replies
  • 0 kudos

Removal access task not generating while using Dropdown(single) request option in Endpoint role type

We are trying to workout on the logic , when a new user is coming to ARS and selecting for a new role and submit for access, new role need to be assigned to user and existing role must be removed from the user.When using Dropdown(single) option, the ...

Vishnu333_0-1701344815572.png
Happy333 by New Contributor
  • 508 Views
  • 8 replies
  • 0 kudos

Resolved! Dynamic Attribute not available for Create Account Task when generated through Role Request

When I request an AD account for a user directly, my dynamic attribute will work correctly.But when I request an Enterprise Role for a user which has no account yet, a task to create the missing account is automatically created. But in this situation...

TimoR by New Contributor III
  • 388 Views
  • 1 replies
  • 0 kudos

Role Repair Notification

Trying to setup role repair as we have seen roles not fully applied, etc.Trying to setup the notifications according to this document: https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Repairing-Role-Mappi...

Bwagne by New Contributor III
  • 258 Views
  • 3 replies
  • 0 kudos

Pop up box in User Manager Certification Blank

In a User Manager Certification the Roles included in the certification are displayed as a hyperlink - when you click on it, a blank white box appears. What is the purpose of this box and should something be displayed? Is there there a configuration ...

kfoley1_0-1701112098930.png
kfoley1 by New Contributor III
  • 596 Views
  • 11 replies
  • 0 kudos

Resolved! Make role non-requestable and in-active

A role has to be made non-requestable; I'm trying to achieve by making the Requestable value as False in the UI.After changing it to False and clicking on submit button an error pops up (error screenshot attached).Let me know if anyone has come acros...

Bharath_1-1701184802073.png Bharath_0-1701184739605.png
Bharath by New Contributor II
  • 255 Views
  • 4 replies
  • 0 kudos

Transfer of timebound role in case job fails

Hi Team,Recently our saviynt account import job(DB connection) failed with some duplicate entry error. On checking the issue, we did not find any duplicate entry. There were some timebound roles assigned to users, when the job failed it deleted all t...

Kaushik1 by New Contributor
  • 470 Views
  • 5 replies
  • 0 kudos

AzureAD Group creation customization

Hi,Are we somehow able to remove these additional pages (Select Child Group, Select Parent Group) in role/Azure AD Group creation?We would only need to select the owner for the role/group and then would submit the creation, no need for additional pag...

Tommil_1-1701412716308.png
Tommil by New Contributor III
  • 233 Views
  • 1 replies
  • 0 kudos

Does a role stay if an entitlement is removed from AD? Will Saviynt overwrite what is in AD?

If a user has a role that has three entitlements, and one of the entitlement is removed from AD will Saviynt remove the role from the user? Or will Saviynt keep the role and just remove the entitlement?Alternatively, will Saviynt try to overwrite wha...

johnson by New Contributor
  • 353 Views
  • 5 replies
  • 0 kudos

Resolved! Role Approval Workflow

Hello, Can Enterprise Roles have independent workflows attached to them or do all roles have to use a single "Role Add Workflow" in the global configurations? I am a scenario in which a role request should go to a custom group or user vs. a manager. ...

ewalton by Regular Contributor
  • 973 Views
  • 6 replies
  • 0 kudos

Mandating Role Owner

Hello,We have a requirement where we must not keep owner as blank while creating Azure AD group. Any idea / hint how that can be done in selectowner.gsp? Thanks,Mohamed M Shaikh

Musharraf by New Contributor
  • 439 Views
  • 3 replies
  • 0 kudos

Resolved! EMERGENCY ACCESS ROLE - NOT VISIBLE IN ARS

Hi, we are trying to configure the emergency access role and we did the following:-the application for what we are creating it is SAP S4-hana which is already integrated in Saviynt;-in the security system we selected Auto Approve Workflow for Emergen...

GiuseppeDM_0-1699972902722.png GiuseppeDM_1-1699973061806.png GiuseppeDM_2-1699973129515.png GiuseppeDM_3-1699973275298.png

Roles are not "Detecting" user-role association on user profile when user already have endpoint enti

We would like to know what is the process to detect (not assigned) the roles on IGA user profiles when user already has that entitlement/group on the endpoint/target system.We have imported roles with entitlements attached using csv file option user-...

Build relation between two dynamic attributes

Hi Team, We have table with three columns username, role and region.  When the user selects the role  all the  regions are getting displayed as below. looking forward to build relation between  role and region.  ROLEREGIONgtsadmin gts  gtsusergts  op...

Manju_p_0-1699792164705.png
Manju_p by New Contributor II
  • 359 Views
  • 5 replies
  • 0 kudos

Resolved! RolesImport for DB Connector

Hi Currently, I am working on DB Connector and for that I was successful in importing entitlements and accounts in to the EIC but for some reasons roles are not getting imported. I also run the Roles Import (Complete) from Database  Job and the job w...

Mortal by New Contributor III
  • 713 Views
  • 7 replies
  • 0 kudos

Resolved! Add entitlement to role via api

Dear All,I'm trying to add some entitlements to some roles but the api is failing all the time saying that the entitlement type does not exist:{{lab_url}}/ECM/{{path}}/createUpdateEntitlement{    "endpoint": "Azure LAB",    "entitlementtype": "AADGro...

travemole by New Contributor III
  • 645 Views
  • 4 replies
  • 0 kudos

Resolved! Request Roles Query

Hello, I am trying to create a roles request query. What I am hoping to accomplish is to have an enterprise role that is only visible to request if the logged in / requesting user works in the R&D Department. Can you help me with modifying the curren...

ewalton by Regular Contributor
  • 422 Views
  • 1 replies
  • 0 kudos

Role Approval flow

Hi Team, Hope you're doing good! We've got below requirements from application team, please let me know if these are doable:1. Remove account button should be visible for only few people.2. When we use radio button in ARS, It generates 2 requests and...

Pre-populate Role metadata during provisioning

Hi All, We have a requirement to read Role metadata during provisioning. The Role will be assigned as birthright to the user and based on the metadata information we need to trigger account provisioning and populate the Role metadata attribute value ...

AG by Regular Contributor II
  • 1030 Views
  • 8 replies
  • 0 kudos