Hi,We have a requirement to design a two level work flow, once user requests for account and entitlement access to an application both the request (account and entitlement) should go to manager and once approved only the entitlement (access) request ...
Hi, we have the following workflow use case to implement : Manager is the first level of approver : OKWhen manager approves the request, there can be remaining SOD, if not remediated.If there is still SOD in request : Redirects to second level : Role...
Hello,I am trying to read the value of 2 dynamic attributes and assign them as approver to the next workflow steps.But it is not working.I have tried different solutions, but they are not working.First versionBoth approvals were going to admin (admin...
Hi,Does anyone know the syntax for referencing a dataset in a workflow (if else block)? I tried some searching and did not see many references.We have a dataset with attribute1 and attribute2. For example, attribute 1 is 'Location name' and attribute...
Hi All,I am trying to implement a workflow using custom assignment module of workflow. Within the custom assignment module the type selected is custom query. Within the module I'm trying to fetch the accountkey of the account for which I'm submitting...
Hi,We have a requirement like pulling the username from a custom property of entitlement.Suppose entitlement custom property30 is cn=xyz,dc=abc,....Then for approval the workflow should be triggered to xyz. Appreciate any suggestion regarding how to ...
We have a requirement where we are trying to configure auto expiry the access requests after 10 days if it is not approved in a workflow. Can you please help us with the workflow configuration for the same ?
When utilizing the dashboard, we would like the information from the charts and widgets to take us to table that provides more detail on that specific feature. For example, when clicking on (Summary of User Manager Certification-Approve/Revoke Entitl...
Hi, as it is currently not supported to set the account name for service accounts to read only, we need to find a workaround to enforce our naming convention. Therefore we thought about two options:1. Regex to check account name => not possible as th...
The ServiceNow request form will be filled in by the Managers for contractors onboarding and approval should happen in ServiceNow and request should be fulfilled in Saviynt IGA. Here the source of truth for contractors is ServiceNow.The User access p...
Hello,We have a use case where :Approval Workflow has 2 Levels, the first one is "Manager Approval"When the requestor submits the requests, an External Risk connector is set up to evaluate SOD using SAP GRC.Requirement : In order for the manager to s...
Hello, I have a question concerning the workflow for a user manager Campaign. Our team understands the logic that in order to see entitlements within the Step 2 Data table a user must action on their user's employment status in Step 1. During testin...
We created an Organization Modification Workflow, configured the settings in the Global Configurations and finally created a new organization. After an update, the newest version was sent for approval.Unfortunetely, the owner did not receive any appr...
When configuring a campaign, a campaign admin has the option to select users from Active directory list, however the current search functionalities will not populate a user if both first and last names are entered within the search bar (see image). I...
Hi All,We are planning to implement service account management and our requirement is during creation/modification if service account owner himself is submitting the request we need to skip the approval.To pick the service account owner from request ...
Hi,We have a requirement to include endpoint owner in a two-level approval workflow. Appreciate any information in this regard (syntax) to put it inside the custom assignment block. Regards,Soumya
Hi all,We are working on Service account Workflow and we have the following usecase which we need your help on- If Ownertype is selected as 'User' in ARS > Manage Service accounts then the request will goes to Next step.-IF Ownertype is selected as '...
We have a requirement for leaver scenario like -Removes account from all security distribution groups except for Azure AD licenses along with others like- Disable Saviynt user identity, -Remove all access, groups. We are trying to implement it throug...
Hi,We have requirement to implement in workflow, Let us consider two users where user 1 was Sav_Role as ROLE_ADMIN and user 2 has SAV_ROLE of ROLE_ENDUSER.So if any user is raising request and the user has admin role the request should get auto appro...
Hi,Need an object of Role Owner to use it in workflow to fetch user properties of the owner.Use Case: Once the create role request is submitted by selecting role owner and entitlements for the role, need to check the condition that if selected owners...
Hi,For the following workflow, email history job is triggering mails for manager and entitlement owner mails but marked templates are failing to trigger. Please let me know if anyone knows the cause of this. Tried checking in data analyzer with follo...
Team,We are using Parallel workflow for our service account use case and we are trying to get the details of user who rejected the request. And we have assigned email template in Rejected Access block. As per documentation: https://docs.saviyntcloud....
Hi Team,We have a below use case and need assistance with Workflow condition.1. We have an endpoint named = Acme2. Entitlement Type for this Endpoint is groups. It has 5 entitlements.For Each entitlement we are using CP5 and CP6 to contain business u...
I have a question as to who this email will be sent out to/ triggered by. Will the Certifier that revokes an entitlement receive the revoke task email or will the user that has their entitlement selected to be revoked receive the email that their acc...
Hello,While testing the out of band detection feature 'Deprovision Access and Re-create Access request', we noticed that the new Add Access request created was auto approved.We don't want it to be auto approved. The Add Access workflow is set in secu...
Hi,The Notify Certifier email isn't working and we get the following error:No such property: attestations for class.Although if we see freshdesk, we have exactly used the same binding variables as mentioned in the doc below:Link for reference : https...
Hello,I would like to know if there is a way to recover the comment filled in by a workflow validator on an email.The aim is that when a validator denies rights to a person, we can retrieve the comment and send it to the requester.
Hello,We have a requirement to assign approval in a role modification process to the owners of the entitlements being added to the role. I am using a custom query block with below query, but unable to find the correct variable to use to fetch the ent...
To my understanding within this current version 5.5 SP 3.x there is no automatic bulk escalation of certifications for a user manager campaign to reassign from an L1 manager to an L2 manager. With this in mind I am looking for another possible workar...
HI Team,I have a requirement to sent out approval notification to user based on the option selected during user enrollment. Ex: We have 10 different Hrs available and notification for HR approval should be sent only based on the HR selected during en...
Hi,We are using a user groups as the resource owner for an endpoints. I would like to skip the resource owner approval step if the requester is part of that user group. In the if-else block, how can I list the endpoint's resource owner user group mem...
Hi,We have a requirement on updating user email on their change of company and need a logic or a workaround for the same.We have around 82 companies at the moment of which 77 companies have the same email domain, except the leftover 5 companies which...
Hi,How can we check weather the requestor is part of SAV Admin role? Thanks & Regards,Avinash Repalle
Hello,I have the following use case and it seems not working. Could you help look into what's causing the issue?Scenario: I want the request to be auto-approved whenever the manager requested the access on behalf of his/her direct reports. But if it'...
Hi,We have recently seen a weird behavior with update user form. The update user form which was originally generating the request number on submission is no more generating the same. Also, we cannot see it in the Pending approvals queue.Could there b...
Hi Experts,We have a use-case where when any Service Account is created using Manage Service Account Tile.1) It will go for the Owner's Approval first which was selected during creation.2) Once the owner approves the request if the account type for t...
I have a workflow requirement for an endpoint that includes entitlement types that include both individual entitlements as well as Saviynt application roles. Some of the entitlements have owners but most do not. Almost all of the roles have role owne...
Hi Team.We need to include all the entitlement owners in the workflow email template.FYI, I have tried to the below expression but it is returning empty.Approvers names - ${allApprovers.collect{it.username}}
Hi,We have a requirement to generate usernames in sequential numbers for various categories of users created via Created User Form.We have five categories of user, of which 4 categories of users we are generating Category Code (from dynamic attribute...
Hello,I'm working on the use case of creating an account in EIC and then writing it back to the target application. The account has been created under the specific security system and endpoint as it satisfied the conditions of the technical rule. I'm...
Hi,I am trying to populate a field of users where multiple email users could be selected from the system in the dynamic attribute of a create users form.I am using Attribute Type as : Multiple select from SQL QueryValues : select email as ID from use...
Hi All,Need information regarding configuring SAP GRC as Servicedesk connection and sending notification from Saviynt when the request is Submitted (from Saviynt) and Approved (from GRC) to the requestor & Approver.Is that feasible to configure notif...
Team,We are trying to send notification to New Owner/Pre-Authrozied Users whenever they are added/removed for a FireFigther ID. We have a parameters(USEROWNERKEY, USEROWNERKEYREMOVED, PAMPREAUTHUSERSADDED, PAMPREAUTHUSERSREMOVED) which holds the key ...
We are trying to write an email generation query under global configuration. However when we upload the query it throws an error as "Operation not allowed as you are entering a value that resembles or contains script code"Attaching a part of the quer...
Hi all, we have an use case for which we have implemented a create user request form in which the user manager can be selected from a dropdown list.Is there a way to use that manager field (containing the manager username) to have him/her approve the...
Team,We are trying to enable Service Account Management as part of it we have below use cases.Create Service AccountAs part of create service account we have below use casesCreate Service AccountAssign Owner(Mandatory, But can only add One Owner of R...
Need the request to be assigned only to the Rank 1 Service Account owner (current owner if its modify request and to the new owner if its update owner request). This is to prevent request going to any other Rank owner for any type of request.For this...
Hi,We have a requirement to generate user PIN which will be used as username of the user. WE aren't able to generate username as PIN via Add register rule under global configurations via a query. Hence we wrote a Saviynt to Saviynt user import query....
Hi Team,Is user group object exposed in if-else block? How to auto approve the request if the requestor is part of a specific user group in Saviynt? Rest of the users outside of the group should follow manager - entitlement owner flow.-Siva
Hi Team,We have approval, Certification reminder emails configured , Can we avoid sending on Weekends, since not body will check still it will be counted as one reminder sent.Is there to achieve this ?
