Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

a 3rd group in an endpoint where 3 rd group will have access to add or remove users from existing 2

Riya
New Contributor II
New Contributor II

We have an endpoint where we have 2 groups, where we want to add a 3rd group where users from 3rd group will have the access to add/remove users from the remaining 2 groups.

How can we achieve this?

 

13 REPLIES 13

rushikeshvartak
All-Star
All-Star

Please explain with example


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

there are some users in a group A say , we want to create an another group B where only the usersAmanger are present and will have access to add or remove users in group A.

Like if we can add it in the entitelment query if users  has entitelment B then only they have access to add or remove users from the other group.

NM
Honored Contributor III
Honored Contributor III

@Riya entitlement query is for user the request is been raised.


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

Riya
New Contributor II
New Contributor II

How can we achieve this then?

  • You can use Sod if your requirement is if user is part of Group B then not of Group A

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

my requirement is if group B  can add and remove users from the  group A .

Like if the user has this b entitelment then he can add or remove users from A entitelment.

Then you can use access query


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Acces query in endpoint

Yes


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

but that would be for the application i want it for the entitlements present in that application.

Like if user has entitlement B then he can see both A and C entitlement in that application so that way he can add or remove. A and C are not requestable right now we want it to be accesed by only B.

  • Then using dynamic attributes you can achieve above logic

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

what should i choose in request type?

account


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.