Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/12/2022 12:57 PM
The company I work for has just started with the product. So most of our systems are disconnected and have to be manually provisioned and deprovisioned. Also most of the users requested and gained their access outside of the system.
So as the status of a user is changed from active to inactive, is it possible to create a generic task to remove access, or have an email sent to a specific email account when the change happens? If so on either of these how would you do it?
Solved! Go to Solution.
04/12/2022 01:58 PM
Hi John,
You can use the user update rule to implement the termination policy with actions as deprovision access amd notification email. I have attached screenshot with sample rule.
THanks
Ajay
04/12/2022 01:58 PM
I see how that works, but lets say that as far a Saviynt knows the user does not have access, as it was requested and provisioned before the use of Saviynt. In the system every user would have AD, would it be possible to send an email to a specific email account noting that the status is now inactive? It would not have to be an actionable email. As almost all of our systems are disconnected, and are not always connected to AD the notification would be needed to alert for the manual removal of access. The AD records are automatically end dated, but that does not solve the issue of the other systems access still being valid.
04/12/2022 01:58 PM
Along with the deprovisioning of AD would I be able to also send an email to a specific email account, using an email template stating that the user is now inactive, thus allowing for the manual work that needs to be done?
04/12/2022 01:58 PM
Hi John,
You should be able t do it.
Thanks
Ajay
04/12/2022 01:58 PM
Thanks I got it to work, just by reading the change in status.