and more in a single search tool across platforms. Read the announcement here. |
Hi,I am looking for methods to bulk delete the enterprise roles (via file upload) which are no more needed (roles created in dev or test environment, etc)I have checked the options available in role upload via UI, could not find anything to delete th...
We are trying to workout on the logic , when a new user is coming to ARS and selecting for a new role and submit for access, new role need to be assigned to user and existing role must be removed from the user.When using Dropdown(single) option, the ...
When I request an AD account for a user directly, my dynamic attribute will work correctly.But when I request an Enterprise Role for a user which has no account yet, a task to create the missing account is automatically created. But in this situation...
Trying to setup role repair as we have seen roles not fully applied, etc.Trying to setup the notifications according to this document: https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Repairing-Role-Mappi...
Is it possible to trigger enable account when granting access to emergency access role request.
In a User Manager Certification the Roles included in the certification are displayed as a hyperlink - when you click on it, a blank white box appears. What is the purpose of this box and should something be displayed? Is there there a configuration ...
A role has to be made non-requestable; I'm trying to achieve by making the Requestable value as False in the UI.After changing it to False and clicking on submit button an error pops up (error screenshot attached).Let me know if anyone has come acros...
Hi Team,Recently our saviynt account import job(DB connection) failed with some duplicate entry error. On checking the issue, we did not find any duplicate entry. There were some timebound roles assigned to users, when the job failed it deleted all t...
Hi,Are we somehow able to remove these additional pages (Select Child Group, Select Parent Group) in role/Azure AD Group creation?We would only need to select the owner for the role/group and then would submit the creation, no need for additional pag...
If a user has a role that has three entitlements, and one of the entitlement is removed from AD will Saviynt remove the role from the user? Or will Saviynt keep the role and just remove the entitlement?Alternatively, will Saviynt try to overwrite wha...
Hi Team,We want to fetch Roles ->entitlement-> Child entitlement->Child entitlement(Tcode)Below query I have used But till child entitlement it is working fine but Can't able to fetch Child Entitlement's child Entitlement(Tcode Value)select distinct ...
I am trying to create a mechanism to automatically make the Role status Inactive over a period of time by following these steps:① Add "-old" to the end of the Role Name of the Role with "FY 2311" in the Role Description.② Make the status of the Role ...
Hi,The reason of this post is to gain some insights on a problem that is key to our project. We want to implement in our Saviynt tenant a system through which some users will be able to request hardware components (laptop, screen, mouse) for themselv...
Hello, Can Enterprise Roles have independent workflows attached to them or do all roles have to use a single "Role Add Workflow" in the global configurations? I am a scenario in which a role request should go to a custom group or user vs. a manager. ...
I created a request for an Enterprise Role for a user on November 15. In the request, I set the start date to November 16, 8:00 am, and the end date to November 17, 08:00 am. We have an EnterpriseRoleManagementJob which runs once per hour, but even a...
Hello,We have a requirement where we must not keep owner as blank while creating Azure AD group. Any idea / hint how that can be done in selectowner.gsp? Thanks,Mohamed M Shaikh
Hi, we are trying to configure the emergency access role and we did the following:-the application for what we are creating it is SAP S4-hana which is already integrated in Saviynt;-in the security system we selected Auto Approve Workflow for Emergen...
We would like to know what is the process to detect (not assigned) the roles on IGA user profiles when user already has that entitlement/group on the endpoint/target system.We have imported roles with entitlements attached using csv file option user-...
Hi Team, We have table with three columns username, role and region. When the user selects the role all the regions are getting displayed as below. looking forward to build relation between role and region. ROLEREGIONgtsadmin gts gtsusergts op...
Hi Currently, I am working on DB Connector and for that I was successful in importing entitlements and accounts in to the EIC but for some reasons roles are not getting imported. I also run the Roles Import (Complete) from Database Job and the job w...
Dear All,I'm trying to add some entitlements to some roles but the api is failing all the time saying that the entitlement type does not exist:{{lab_url}}/ECM/{{path}}/createUpdateEntitlement{ "endpoint": "Azure LAB", "entitlementtype": "AADGro...
Hello, I am trying to create a roles request query. What I am hoping to accomplish is to have an enterprise role that is only visible to request if the logged in / requesting user works in the R&D Department. Can you help me with modifying the curren...
Hi,Can we import DB Administrator roles into Saviynt if yes then how? Can You please help us with this? Thanks
Hi Team, Hope you're doing good! We've got below requirements from application team, please let me know if these are doable:1. Remove account button should be visible for only few people.2. When we use radio button in ARS, It generates 2 requests and...
Hi All, We have a requirement to read Role metadata during provisioning. The Role will be assigned as birthright to the user and based on the metadata information we need to trigger account provisioning and populate the Role metadata attribute value ...
Raised a request for AD Logical app from Saviynt ARS. You will see the new account task getting generated for the application even though account already exists in the Pranet endpoint (Active directory)and "Disable New Account Request if Account Alr...
We are trying to improve security related to movers. There is second and third level organization data that we receive into the user data from our HR system. We would like to be able to detect a change on that field and take action on the user's role...
We would like certain Enterprise Roles in the ARS to be visible to only a select group of users or a single user. Is there a way to accomplish this? Any information would be greatly appreciated!
Hello,I'm looking for a way to remove all entitlements from roles in bulk. I was used to work with same solution as proposed in this topic, but it seems to not be working anymore :https://forums.saviynt.com/t5/identity-governance/how-to-delete-bulk-e...
Hi Everyone,Is there any way to merge guest accounts in Saviynt with non-managed guest accounts on Azure Active Directory.?
If I understand the documentation correctly, the permission 'campaign_list' allows the user to view all available campaigns and not just the ones s/he is part of.campaign_listATTESTATION/campaign/**Required to access campaigns.Is there a way to limit...
Hello,We found that when a enterprise role is inactive, we could not update the role, but we still can assign the inactive role to users.This may cause Add Access task and/or New Account task if there is entitlements setup for the inactive role.Is it...
Dear community,I am curious whether Saviynt has recommendations about how to set up SAV permissions according to roles.For example, I would assume (or expect) a role for Saviynt Administrator, System Auditors, Saviynt End users, or End users who also...
HiUserCase: User requests an Enterprise role from ARS along with StartDate and EndDate in the request.All the entertainment in the role gets the same StartDate and EndDate in the Target SAP system.Later when a new entitlement is added to the role, th...
Hi Team,I need to reject the request automatically if it's missing attachment in the Access Request for an enterprise role. What should be the if else condition in the workflow to fulfil my requirement?Please note that I can't make attachment as mand...
Hello.I am in trouble because I cannot upload Roles as I want.I am trying to create multiple new Roles by uploading a CSV file.Each of these Roles has its own AD Entitlements.For these Entitlements, we use the ones we have already imported from AD.So...
Hi experts,We have a requirement where the Role needs to go through Approval when the 'Role Name Starts with Saviynt, if not skip the workflow. we have tried the below in the If-Else block and we are getting the below errorendpoints.endpointname.equa...
I see in the release notes that the 'Add All' functionality has been removed from the user selection when mining by user.Working with Role Mining (saviyntcloud.com)What is the workaround for this situation? We wish to mine all users in a certain loca...
Hi Team,we have a requirement to implement the the entitlements with new account based on the users employee type in single endpoint.for example: if the employee type is internal then we assign the entitlement A and if the employee type is external t...
Hello,After uploading the file for bulk role request and clicking run now, I get this confirmation message and another pop up saying the background job has started. However, I don't see anything in the request history or anywhere.Is there something I...
We want to bulk upload Roles via Role Management option (CSV) but we cannot upload the ENTITLEMENT_VALUEKEY for the specific role.Is there an option to do this and can someone please give us a hint?Thanks
Hi all,We had recently customized the role details GSP (roles/roledetail.gsp) to hide and change the input type of some fields. But we noticed that when we update the role and it moves to Composing state, the Role Details page view shows the default ...
Hello,We are trying to configure Jira Connector AccountImportJSON to import role data for each user and implement a hierarchy that shows Project > Roles.Currently, we are having issues with trying to iterate multiple variables in an API call under en...
Hi everyone,we use the custom properties of roles for the translated role name. Is there any way to display the custom property of a role during the access request?For a basic test I tried this:I set the role type to Enterprise, made the role request...
Hi All,We have a client requirement to not allow more that one inflight request for any application(User can only request enterprise roles we don't have any application roles.). Marking "Block any request due to existing request/task in-flight" as tr...
Hello everybody,we need to have speaking role names for the requestor to make sense of what he is requesting for - so we are looking for a way to localise role names. We only found the feature in Saviynt to localise labels, but not the actual role na...
Hi all, is it possible to use additional characters in the naming of the roles such as in the Cyrillic script?
Hello everybody,in the roles we stumbled across the "entitlement glossary" next to the description field: For what use it this glossary field? What kind of information is expected here?Thanks for the clarification!
Hello Team,Hope you're doing good!!There's a requirement, suppose there're multiple entitlements associated with an application and a user is already having 1 of the entitlements then they should not be able to request for any other entitlement unles...
Hi,We need to upload a bunch of user to role associations. This is so that existing users that already have the roles assigned are uploaded at EIC, while migrating from another iam tool. We are able to upload the user-role associations. However in th...
