Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

User status change notification

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 11 2020 at 16:02 UTC

The company I work for has just started with the product. So most of our systems are disconnected and have to be manually provisioned and deprovisioned. Also most of the users requested and gained their access outside of the system.


So as the status of a user is changed from active to inactive, is it possible to create a generic task to remove access, or have an email sent to a specific email account when the change happens? If so on either of these how would you do it?

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
5 REPLIES 5

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 12 2020 at 02:27 UTC

Hi John,


You can use the user update rule to implement the termination policy with actions as deprovision access amd notification email. I have attached screenshot with sample rule.


THanks

Ajay

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 12 2020 at 19:34 UTC

I see how that works, but lets say that as far a Saviynt knows the user does not have access, as it was requested and provisioned before the use of Saviynt. In the system every user would have AD, would it be possible to send an email to a specific email account noting that the status is now inactive? It would not have to be an actionable email. As almost all of our systems are disconnected, and are not always connected to AD the notification would be needed to alert for the manual removal of access. The AD records are automatically end dated, but that does not solve the issue of the other systems access still being valid.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 15 2020 at 19:38 UTC

Along with the deprovisioning of AD would I be able to also send an email to a specific email account, using an email template stating that the user is now inactive, thus allowing for the manual work that needs to be done?


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 16 2020 at 02:53 UTC

Hi John,


You should be able t do it.


Thanks

Ajay

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on June 16 2020 at 19:47 UTC

Thanks I got it to work, just by reading the change in status.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.