and more in a single search tool across platforms. Read the announcement here. |
Hello,We have a use case:When a new user requests access to a specific group in application x, they should automatically be provisioned an account on application y and z and get specific groups on those applications. How would we go about doing this ...
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
Team,Is there a way to get list of users who qualify for BR technical rules based on the basic or advanced conditions that are configured in rules.For example -User attributes - state = test, country = abc, location = test1BR Tech Rule - a.state=test...
Hi,We have a requirement to restrict the end-users to request only a specific number of enterprise roles from the "Request Access for others" tile. For example, we want to restrict the user to select ONLY 2 roles out of 100 available enterprise roles...
Hi,So we have a different type of user (Customer/Supplier) whose email needs to be generated in a particular way, however when we include it in the email generation query under global configuration it throws the following exception:Query : case when ...
Hi everybody, I am trying to create different roles but I came across a couple of problems and I cannot find an answer anywhere. Here are the questions: 1. When I am creating roles, I add also an Endpoint to them. In that case the role goes to COMPOS...
When configuring a Campaign, we have the option to select a default Certifier and Reassignee ? Is it only limited to a single user for both options. The Campaign Owner field within the Campaign creation allows for a group to be selected and for both ...
In my use case I need to assign multiple enterprise roles to a user as birthright access based on user's job code. So for example if user's job code is "001" .. I need to assign role "A1", "A2" .. etc .. but for some other job code this set of enterp...
Hello,We are trying to create users using create user form. In creation flow, we are assigning a Enterprise Role to the ID.1. The user request is auto approved and2. Enterprise Role request is tagged with Approval WorkflowHowever, when we feed in use...
Hi,we have a requirement that user should be able to request pre-approval for emergency access roles. When a user has pre-approval for an emergency access role, then they can request the emergency access role for limited time with auto-approval.We're...
Hi,In the Technical Rules page, we need to be able to assign Role to the user based on a few conditions rather than the direct assignment of entitlements/accesses.But in the Object Type drop down, we can only see the option of Enterprise Roles. Snaps...
Hi All,I need some help regarding role owner actually I created one role and from role owner tab I click on actions button for adding role owner but it is showing like below-In the above screenshot you can see no search is showing then I how can I s...
Hi,We need to disable Exchange account for a user on termination. However, that is triggered via powershell script for license disablement on exchange.We are able to pass the http params via update account json, which includes the username of the use...
Hi,We have a requirement to generate usernames in sequential numbers for various categories of users created via Created User Form.We have five categories of user, of which 4 categories of users we are generating Category Code (from dynamic attribute...
Hi,I am trying to populate a field of users where multiple email users could be selected from the system in the dynamic attribute of a create users form.I am using Attribute Type as : Multiple select from SQL QueryValues : select email as ID from use...
Hi,We have around 18000 departments which we wish to populate in a dropdown in the create user form from a dataset table that we have imported.However, dataset gives us a threshold of only 10k lines of entries.Any workarounds for this use case?Can we...
Hi team,I am trying to create a role from UI, when I click on create getting 'Invalid token' error popup. Could not find anything in logs.Please suggest any configuration needs to be enabled.Thanks,Smitha
We are trying to write an email generation query under global configuration. However when we upload the query it throws an error as "Operation not allowed as you are entering a value that resembles or contains script code"Attaching a part of the quer...
Hi,We have a requirement to relaunch a campaign for all users whose campaign response was ' No Response'.We have selected to revoke tasks for certified users on campaign expiry and hence, for users for whom 'No Response' was selected, we need to rela...
Hi,We have a requirement in which the companyname of the user being created should be equal to the company name of the requestor via the Create User Form. However, the manager to be shown in the dropdown should belong to the company name select, whic...
Hi,Is it possible to route the approval to individual entitlement owners instead of the role owners in an approval workflow when the user is requesting an application role?Based on freshdesk documentation I tried using a custom assignment with query:...
Hi,We have a requirement to generate PIN number for external employees via either SAV to SAV or via the Create User Form (Dynamic Attributes) (Recommended)Use Case :If an employee joins a company, his PIN will be generated based on [CompanyCode][Maxi...
Is there a way to assign users an entitlement without it being part of an enterprise role (using ARS or another method) or is adding the entitlement to an existing or new role the only option?
Hi all,I need information how we can request for application role through ars.I created two two role under that role in entitlement tab I added the groups which is associated with those role then from endpoint role type select request option as table...
From the docs regarding technical rules and forum posts, it seems like a technical rule and its advanced queries can only access the users table.We have a requirement to assign an enterprise role (containing application entitlements) to a user only w...
Hi team, Wile creating new role we added entitlement and sent it for approval and getting below error.We also tried auto approval and also user is having ROLE_ADMIN savrole still we are getting below error Can someone help ? Regards,Supriya
Hi All,Need information how to provision multiple AD group if we select single group from ARS based on that single group we have some other dependent group that needs to provision when we select those single group.As an example I am selecting A grou...
Hello all,We are doing entitlement mapping of 'accounts' to 'entitlements', we have already uploaded accounts and entitlements separately using schema imports. There are two entitlement types, Groups and Roles. We are able to upload and map one entit...
Hi,we are trying to request emergency access role via createrequest API but we are getting 500 Internal Server Error . Any one using this api to request Emergency access roles and succeeded. Below is the request body. Below request body is same as d...
Hi, I had a requirement to make document on this and then see which can be implemented for future use. I need information on Role types which are below • Enabler Role For this role type I have referred below guide link but I have question. Does t...
Hi,Assuming ..Endpoint E has three account types 1, 2, 3.A user X have three accounts on endpoint E : a1 (Account type 1), a2 (Account type 2), and a3 (Account type 3).Account a1 have two entitlements of E1-1, E1-2Account a2 has one entitlement of E2...
Hi all,We are trying to set up a simple User Manager Workflow and simple email to be sent whenever a new role is being requested.( Once we confirm it works we can modify to add other details in email)When the new request for role is being raised via ...
When looking at accounts associated with an entitlement, there is an attribute 'assignedfromchild'. We are seeing that out of 100s of associated account, it is set as 'false' for just one account. What is this flag used for and how is it set? What do...
Hi Teamwe are trying to create add access task to provide access to the entitlement"GG-TH-Lotuss-PowerBI-Dar-Channel-Store" if the user profile is matched the technical rule condition. And this error we are receiving only for a few usersErrorservice...
Hi,I would like to know the best approach to allow user to change few details of his own by logging into saviynt. for example first name, phone number,etc)can we do that with user update details in ARS? if yes, how can we limit to allow user to modi...
Hello,Is there a way to get change history details for roles ?Thanks
Hi,We have a Database target system where in Roles are assigned to user. These roles are combination of PermissionModule and Permissions. Having said this I have below queries :1. Using ROLESIMPORT configuration the Database Roles are imported in Sa...
Hi!I noticed that there was a discussion last year about if application roles can be added to technical rules but it was said that it is not possible. Reference: https://forums.saviynt.com/t5/general-discussions/can-application-role-be-assigned-as-bi...
Hi Team, We have got a unique requirement from one of our application teams. Currently, we have enterprise roles configured in Saviynt having entitlements from multiple endpoints. The role composition will include Profile, PermissionSets and Role ent...
Is any document/white paper available for the exact purpose of SAV roles?
Hi Team,Is there any mechanism to handle Delete/Update/Add role via File Based import for Roles?I can see we can add a role owner but no option to delete an existing one. Thanks
I am doing some research into Birthright policies and how they can be promoted from one environment to another i.e. from a Dev to Test environment and wondered if there was some help or documentation that you could point me towards.We have looked at ...
Hi we have a requirement to modify the Azure AD form based on customer requirement. 1.) i can't find any document regarding the customisation of .gsp page , i tried to modify a CreateAzureADgroup.gsp from Admin-->settings->File directory-->roles/az...
Hi,I am currently working on configuring a REST based connection. The REST application receives the list of accounts and roles as follows:{ "_links": { "self": { "href": "url/api/v2/users/", "title": "List of User Prof...
When trying to Create an Azure AD Group, the screen does not match the documentation. What settings need to be in place to show the Azure AD specific Create Group screen?I'm expecting this (from the documentation (https://saviynt.freshdesk.com/suppor...
Hello,I am trying fetch all roles present in system. But the result does not roles of type "Enterprise".Is others face the same issue?ThanksPadmalochan
Hello everyone,What is the best way to mine roles based on user attributes? In particular, I need to mine roles based on department values for my users. These values, in turn, come from HR system import.I see that Saviynt allows to mine based on ente...
I am trying to bulk update user is a Role using the Upload Role Association.The File format belowROLE NAME,SECURITY SYSTEM,ENDPOINT,ROLE USERSFinance,AD,AD,45698Finance,AD,AD,32145I ran the import for the first time with one user and it worked, the u...
For v5.5SP5, does this version have the capability to detect Roles such as Application and Enterprise roles based on existing access that an application user account has?We are creating an application and enterprise role model in Saviynt for an exist...
Hi Team,Do we have any best approach to rename Roles in bulk .We have approx 90+ roles to be renamed and one approach that I can think of us is using update query to be run in customquery job.Do we have any other approach?We are in SP3.5ThanksShyam
