|
Click HERE to see how Saviynt Intelligence is transforming the industry. 
|
We created ROLE_ADMIN_AUDIT_READONLY for the Internal Audit team to review and test Saviynt processes. This is a read only role. When they try to view the task details, they receive an error message stating 'Operation Not Allowed'. We have added Co...
Hello,I’ve noticed some discrepancies in the Sav4Sav RemoveAccountJSON. I came across both topics in the forum that partially address my concerns but don’t fully clarify everything.https://forums.saviynt.com/t5/identity-governance/sav4sav-removeaccou...
Hello Team,Can someone share the list of features, webservice access to setup Read Only SAV roles.Allowed Permission :1. View all users2. View all accounts3. View All Pending Request4. View all Request History5. VIew All pending task
Hi,I am trying to create a SAV Role who will be able to manage organizations.I have added all features that contain "organization" to that role, and a user of this role is able to navigate to Admin - Identity Repository - Organizations, but can see o...
Hi, we are trying to create a SAV role for managing roles.The role has the following features enabled:Admin: RolesManage RolesUnder Admin -> Identity Repository -> Roles we can see all active roles without problem.When we select a role and change for...
Hi,we are trying to create a SAV Role that allows its users to view usage analytics. (Intelligence -> Usage Analytics).We added the following feature to the SAV Role: Usage AnalyticsA user having this role can now go to the menu Intelligence -> Usage...
I created another posting on the topic of SAV roles: https://forums.saviynt.com/t5/identity-governance/sav-role-for-usage-analytics/m-p/122706 - in addition to the following I just found out, which leads me to believe that the SAV Role permissions ar...
Hi,We need to remove 1000+ users from SAV Roles in Bulk. How we can do that?Thanks,Akshay
We are trying to add customized SAV role to all the existing users in Saviynt. We are trying to do this using Job enhanced query. We dont have Sav2Sav connection. Below is the query I'm trying but its not working. select 10 as user_savroles__userkey,...
Hey all, I've seen a few posts on this one, which i've tried using the suggestions for but am still striking out. I've configured ROLE_TASKADMIN as detailed and have granted it the features & web service permissions indicated but my user is still get...
Hello Saviynt,There is a requirement that we want to associate membership of Saviynt SAV Role XYZ based on AD group ABC. So saviynt will grant access Saviynt SAV Role XYZ based on user AD group ABC entitlement. If a user is a member of that AD grou...
Hi,We would like to grant our end users the ability to approve requests assigned to them.Use case: A manager having a ROLE_MANAGER SAV Role in Saviynt creates a temporary delegation to a user having only the ROLE_ENDUSER role. We were thinking the Ap...
Hi all,We have created a copy of the SAV role ROLE_SAV_MANAGER to make some changes to. One of the changes we want to make is to enable one-click disable for managers with this role and ONLY show the managers a list of their ACTIVE CONTRACTOR direct ...
Hello,When giving permissions to a user by a SAV Role, the access is conditioned by the user's ownership of objects in Saviynt.For example, even if a user has access to Home > Manage Entitlements > Update Existing Entitlements, thanks to a SAV Role, ...
Hi,I have a requirement where we need to restrict users in Access request without active managers. To achieve this, I am updating the end-user SAV role whom to request with an HQL statement. Below is the HQL statement that I am using:select a from Us...
Hello Saviynt,We have a requirement to protect a user from editing only certain user attributes, example, First Name.How can this be done?Thanks,
Hello TeamWe have to restrict the below configuration via Role Management.End user(not a part of Admins or any Local IT Savroles) should be able to ONLY see and manage the entitlements in role that they are owner of that entitlements.Please can you h...
We need to add customised SAV role to all existing users. Do we have any method to acheive this?I tried this query in postman but no success. I want to do it for more than 20k users{ "userId": "{{userId}}", "roleName": "<role-name>", "operation...
Hi Team,Could you please let us know how to assign a sav_role once the user is created in Saviynt. We have this config already setup to assign role_users in our 5.5 environment, since we are getting upgraded to v24.4 and we need to assign a custom sa...
Hi. I'd like to leverage Saviynt dashboard for couple of indicator i have. But it seems not working properly. Please advise if i don't know something. 1. Wanted to change 'Chart Properties' section. But i was not able to. Also, got below 2 types of r...
I fails 'Request to Add Entitlement' with error 'Invalid Request TypeNo signature of method: org.codehaus.groovy.grails.web.json.JSONArray.split() is applicablefor argument types: (java.lang.String) values: [=]Possible solutions: split(groovy.lang.Cl...
Hello How can we add a role owner for SAV role.
Hi Team,We have created a custom SAV role with below mentioned feature access, getting access denied screen while clicking user's accounts. Our expectation is that after clicking user --> accounts --> access denied error (It should be account details...
Hello,We created a user registry form and it worked fine. However, we want to restrict the form visibility and editable ability based on SAV Role other than based on form fields definnition.For example, if SAV Role 1 login to home page and submit use...
Hi Team,From the customer’s perspective, is there any licensing involved when assigning SAV roles to team members?They are concerned about whether granting Saviynt access to the service desk team with limited permissions will affect the cost or licen...
Hi,We need to add Sav Role EndUser as a birthright role to all users. But we are not able to see Add Sav role option in the job configurations. We are on version 24.7. Below is the screenshot:Can you please suggest how to add sav roles as birthright ...
Hi Team, We have a requirement to restrict the change password policy from API.We dont want using Saviynt Service Account any service account password can be changed however normal user account password can be updated/rotated using that accountServic...
Hello, I created an SAV role with the intention of allowing end-users who have that role assigned to view and run specific reports. However, we encountered an issue with runtimes, as they have a dynamic attribute.When we assign the user the SAV role,...
I am trying to create a SAV role that has the ability to read/view users. The only thing I've found within the Features is Admin: Manager Users, which gives the ability to edit users which I don't want. I only need the SAV role to have read/view for ...
We are experiencing issue with filtering user accounts based on their prefixes ("sa-" and "ea-")we need to filter user accounts where the u_account_name starts with "sa-" or "ea-"ImportUserJSON{"connection": "acctAuth","successResponses": {"statusCod...
Hi Team,We are adding users to savroles (ROLE_ADMIN & ROLE_MANAGER) manually and then we ran account import job using Sav4Sav. But we observe only ROLE_ADMIN is getting mapped to account and not the other savrole.When we add savroles to users using A...
Use case:-We want to limit a user with savrole Sav-limit-access to only submit cases for certain users. They should be able to select only certain users and submit RequestAccessforOthers, ViewExistingAccess, RequestEnterpriseRolesWe have configured...
Hello,When making a delegation we are able to filter the list for whom the user can setup delegate for. it works well.What i need is how to filter the list of the Delegate User (image below).I want to hide from the list the admin and the systemadmin ...
Hi There,I have been testing some of the features provided in the 'Feature Access' tab under SAV Roles, and noticed that the 'Admin: Users' feature may be providing more access than intended.When providing the above feature (and only this feature) to...
Hello All, We would like to delegate specific teams to be able to change/update just a few attributes on Users.We don't want to allow them to manage all user's attributes. This is to support specific cases as the rest of attributes is being synchroni...
I have a role in production called ROLE_WEBSERVICE_READ_XYZ which provides the following permissions:Menu Sub Menu URL WEBSERVICESUBMENU.WEBSERVICE.api_v5_authenticateUser/api/v5/authenticateUser WEBSERVICESUBMENU.WEBSERVICE.api_v5_getToken/api/v5/ge...
Hello,I am using the SAV to filter on the Whom to Request. I am using the JSON below. With this Json i don't see any user when doing a RequestAccessforOthers - multi other then the requestor.1-) Anyone know what how to add a block for it please? (for...
Hi team,We have the requirement to assign the one Sav role when new delegate has been created in the system and the user manager. We have a custom query to assign the Sav role to the user for Delegate but the Custom query Job is no longer in the late...
Hello everyone,We are preparing to deploy nearly 10,000 users to the production environment by importing them via CSV file into Saviynt. During this initial import, we want to ensure that all users are assigned the ENDUSER SAV role.I came across a su...
Hi,we are trying to configure SAV role which can provide access to the application owners to see completed tasks specific to application. This application is automated so the owner of all the task is admin. How to configure SAV role in such a way tha...
Hi,We have a requirement to assign a particular dashboard to the users. I have customized the SAV ROLE and achieved the requirements but the problem here is the User is able to view the Dashboard settings as well which is to be avoid in our case. Is...
Hello,We want to configure SAV Role for Application Owner, it should only show User having that particular application access, for that we are configuring in Whom to request -> Request for self and user retrieved for advance filter.We have followed ...
We have a requirement to route the approvals to ROLE_ADMIN sav role in case a user inactivates an AD group via Manage AD Group tile.Need to know how we can fetch the Status value selected on the form in Approval workflow attached at Global config for...
how to modify the SAV role so users can manage only the roles of the endpoint where they are part of their admin usergroup
Hi Team, I want to create a Read-only, Entitlement-only SAV role for a few users, restricting their access to anything else on the Admin tab.I've tried creating it, but it's not working. I also attempted reverse engineering with no success. Can you p...
Hello,We are getting 400 bad request. Localauthenabled set to true for the user we are using and the sav role admin assigned. Can someone help me what I am missing here.
Hi.I'm trying to only allow specific users to do 'Add Reviewer' function. How can I allow them to do it by granting which SAV Role? Trying to test by switching SAV roles to an end user but didn't get a useful results yet.
Hello, we want to create a ROLE_IT_SUPPORT and ROLE_HR_Users Sav role for our employes so they are able to view the Users profil in Admin : Users.This is basically our custom ROLE_ENDUSERS but with the adding of that Feature Access.They only thing we...
Hi everyone, I've been having trouble with my SAV Roles, particularly when it comes to assigning multiple roles to a user. When I set up a SAV Role I understand, that I can use the For whom can the user setup delegate to limit the scope of Parent Us...
Hi everyone, We face the issue, that whenever a user is trying to setup a Deletage, the following error message appears, when For whom can the user setup delegate is set to a specific set of users (e.g. select a from Users a where (a.id=${users?.id})...
