and more in a single search tool across platforms. Read the announcement here. |
Hi,When a new request is raised for an enterprise role (from Request Access/Request Access for Others tile), the request should be sent for role owner’s approval. However, the approval for new account would be suppressed and it would be auto approved...
Hello,when there is a enterprise role assigned to a user or requested by a user. although the user is active and the request is approved. but one entitlement of the role is belong to one of his inactive account. in this case, is that role can be gran...
Hi.We have a specific environment and need to modify workflow accordingly. Here is the info.1. Details- Endpoint 'A' has two types of entitlement values - Application, Roles.- Application type entitlement has 'Infra' or Null values in customproperty1...
Hello. Does anyone see any issue with this section of the workflow? After manager approval, it should go to this part of the workflow but it never gets there. Manager can approve and approve multiple times and it won't get past here.endpoints.customp...
Hello,We are working on Invitation based user onboarding.Referred : Invitation-Based User Onboarding (saviyntcloud.com)We have creatd simple attributes in create user form withour any validation :Attached following WF :The solution is failing for Acc...
I have a use case to force users to select certain custom attributes (configured as dynamic attributes) when selecting an AD entitlement (This is related to the use case posted earlier at https://forums.saviynt.com/t5/identity-governance/mandate-busi...
We have a requirement to show rejected entitlement in the email template in case of partial approvals.For instance, when a user submits a request for 5 entitlements, and out of those, 2 are approved while 3 are rejected, only one email about the appr...
After manager approval I have a condition to check if CP17 is OneLevel, if it is then grant access. The issue I'm having is that it always seems to be false and going to entitlement owner approval even though I have OneLevel in CP17. Any reason for t...
How can we restrict user to select single role in one request in workflow level.Will this variable be helpful - rolesMap, if so what could be the custom query or condition in workflow level.
Hi, We have a requirement where the first level approval need to be skipped if the requestor is member of certain user group. Is it possible to check query in If ELSE condition?Appreciate any pointers/insights to achieve this use case. Thanks
For our AD Security system, we were looking into setting Create Task Action to EntitlementsOnly. If I enable this, will this cause any other issues? For AD nobody can request an account but they have their accounts provisioned through a technical rul...
Hi Team,Can you please help me if request comes via api for update user then request should get auto approve.how we can use in our current work flow. Thanks!Regard,Israr AhmedM
Hi Team,Use case: I have implemented serial 2 level workflow. 1st level is business approver and 2nd level entitlement owner approval. Now here when requestee and Entitlement Owner are same then request is pending with admin. In this case request sho...
Hi Team,We are using Enterprise Role to grant access.We have a workflow that will check if the requested role has any SOD violations or not.If the requested role has a SOD violation, then Saviynt will assign the request to the SOD owner for approval....
Hi Team,We have requirement Enable request for 4 level approval , as of New account/Modify account request have 4 level approval and its working as expected also.similar way we implemented 4 level approval but 2 and 3 level based application name an...
Hello,In workflow if-else condition we want to use below sample query.(com.saviynt.ecm.identitywarehouse.domain.Account_entitlements1.executeQuery("select ae.id from Account_entitlements1 ae where ae.accountkey='195'").size()==0)But we are getting be...
Hi,I have a use case where I am onboarding a new user in Saviynt with a future dated start date.I am provisioning the user to Active Directory with some birthright access using a technical rule. The account and access is provisioned upon user creatio...
Hello,We want to check if the user for whom the request is made, belongs to a specific user group and if so, then auto-approve the request. Otherwise send the request for approval by members of another workgroup (this part can be done with a custom a...
Hi Team, We have a use case in workflow, if requestee and approver are same then it should go to Approver's manager queue for approval. I have tried with below query, however its not working as expected. If-else block condition:(com.saviynt.ecm.iden...
Team,We are integrating few applications using disconnected approach where we are expecting the Application fulfillment team to come to saviynt and complete the tasks manually. To do so we added the respective application fulfillment team members to ...
Hi Saviynt support team,Is it feasible to configure different ServiceNow approval workflow for each Saviynt application? When going through the Saviynt Integration with ServiceNow guide, https://docs.saviyntcloud.com/bundle/SNOW-Saviynt-Integration-v...
Hi All, There is a workflow where it will go for 3 level of approval (Manager and Group Owner and Entitlement Owner approvals) and we we using 3 if else conditions wheather it should go for these approvals or not. Level 1 : Manager approval (We menti...
Hi team,The Workflow is stuck in Manager level Approval for Role requests even if the manager approves it.Below is the configuration and its parallel Workflow.Please let me know what I'm missing.Regards,Gopi.
Hi team,In my parallel workflow, I have created a custom query in a workflow "TASK: Custom Assignment": to send requests to the Sav role users dynamically based on the beneficiary (User) country, but the requests are being assigned to admin directly....
I couldn't find specific details in the documentation, but I remember that at some point, workflow configurations could automatically detect the status of the entitlement owner.For instance, consider a three-step workflow:If Rank 1 is active, route i...
We have a requirement in our environment to use different approval workflows depending on the Endpoints for AD connected applications.For example, some will use manager and resource owner approval while others require to have access approval on the e...
Hi, We have a requirement where we have to approve/reject a request for an entitlement based on the existing entitlements the users account has. If user has entitlement A of Account A, only then grant access to the requested entitlement B. Similarly,...
We are facing an issue in workflow. Once the manager and entitlement owner approve the request idea it should create a task but instead of creating a task it is going under reject mode.Note: - it is in reject mode but approved by manager and entitlem...
We have a requirement for role modification workflow where if there is any entitlement addition, then the request for role modification needs to be sent only to the entitlement owners.We are trying to use the custom assignment block to achieve this r...
Hi All,We are using serial type workflow with SOD condition but IF/ELSE block condition is not working. As per the document, Entitlement variables are not available for serial type workflow. In this scenario, is there a way to implement a conditional...
Hi,We have written a query in the Custom Assignment Block of the workflow to fetch the Rank 1 owner of the requested privileged account.Below is the query: SELECT u.userkey FROM users u JOIN accountowners ao ON ao.OWNERUSERKEY = u.userkey JOIN reques...
Hi Team,I have raised a request to multiple users with different applications from 'Multi user tile' but instead of going through the appropriate approvers, the requests are being automatically approved.Can anyone resolve this issue?
Hi Team,We are trying to achieve a configuration in workflow where at any stage of approval if request is not approved by approver within certain time period, the request/task should get Auto-rejected.Who all can be Approvers:1) Manager2) Manager's M...
Hi,I am trying to fetch the rank 1 owner of a particular account in the Custom Assignment block of Workflow.I have used the below query for this:select u.userkey from users u join accountowners ao on ao.OWNERUSERKEY=u.userkey where ao.ACCOUNTKEY=(sel...
Hello,I am trying to extend the end date for the enterprise role. I am able to update the new end date, but the role removal is still getting triggered after the old end date has been met, even though the end date has now been updated.Below Image sho...
My requirement is that the request must be sent to the manager for approval if role customproperty1= Manual Approval, or automatically approved if role customproperty1= Auto Approval.I have raised a request with two roles (role1,role2), role1 is manu...
Hi,We have a use case where we have to send entitlement for approval based on difference between the end and start date.if enddate-startdate is greater then 2 months send to user group for approval otherwise to manager for approval.I tried with reque...
Hi Team,We have a requirement to send the requests of entitlements which are causing SOD Violation in Account/Access Request to SOD Owner Approval. and Those entitlements which are not part of SOD Voilation in the same request should go to another le...
Hi Team,We have a use case where in the workflow we need to have different approval for new account and entitlement addition. We are using entitlementvalue variable in the if else condition to redirect to the desired approval(working completely fine)...
Hi Team,We have a requirement to set up an entitlement-level approval process for one AD-connected application.Scenario: We have two entitlements "user" and "admin". when any user selects "user" then it should go for only line manager approval but if...
After the approval is completed during the access request, I want to send the approval completion email with all approvers as Cc.To achieve this, I created an email template using Saviynt Documentation as a reference, with the following values in Cc:...
I am trying to create a workflow where when a person requests for access the approval should be sent to the director of the department to which the person belongs to and I've used the following query in custom assignment: select u.userkey from users ...
select userkey from users where customproperty22=${requestedFor.customproperty22};this is the query i am using to route the request to a particular approver by it is always routing it to adminAny possible changes? even i tried another query but same...
We have a customized user creation form, with manager approval workflow attached to it.we have username creation rule as:it is working when we create single user request and after approval user gets created. but when one request is in pending state a...
Hi Team,We have a requirement to reject any FFID request that has a Start time after 6:00 PM.We tried controlling this using workflow in "if else" condition but it is not working. We tried directly from Groovy :com.saviynt.ecm.workflow.Request_Access...
Hello Team,Just need help in Preparing the if else condition to check in Workflow if the group owner raising request for self or for some other group owner for the requested application then the request should go for Requestor manager approval.can yo...
In previous quarters our Advanced query Privileged=4 was used to bring in only entitlements marked as high for the Application owner to certify. The request for this quarter is to also include all service accounts within the campaign. We are looking ...
When we create a user from the user registration form, we need to check if the requestor's secondarymanager is blank.So we created the following wf:condition : requestedby.secondarymanager != nullBut this wf is not working.What should I need to chang...
Found some information, but they didn't really answer my questions. Two questions:1) Are we able to import computer objects and associate them with a user account? (seems this is a yes with a corresponding attribute)2) When a user is approved for acc...
Hello Everyone,We have defined workflow where if user request for some role R1 then the request will go for1. Manager Approval2. Application Owner Approval (Access Approval block with owner Having Rank 1)3. Resource Owner Approval (Access Approval bl...
