Access Request- Disable the Submit button without adding access role along with new account

[Yaswanth]

Hello Team,

Can you help me with configuration, we wanted to disable the submit button without adding access role along with new account request.

Thanks much

[rushikeshvartak · Accepted solution]

Make entitlement type or role type mandatory from endpoint configuration

[Yaswanth · Accepted solution]

I can see this is working in endpoint level.

but do we have any global configuration which can be applicable for all the endpoints

[rushikeshvartak]

No. It will be application specific

[Yaswanth]

Hi Team,

We can make role add as mandatory using required="True" under Role type, but there is an issue while raising the role deprovision request as it is not allowing to deprovision the role (if it is having single role) through ARS, please suggest

[rushikeshvartak]

Make it table as request option

[Yaswanth]

Yes it is table and required is true (At least one role should be selected as new request to application), but the issue is if user wants to de-provision the application role and application has only one role, in that case without selecting any one role it will not move forward.

eg: I have access to one application role and i want to de-provision that.

[This message has been edited by moderator to mask sensitive information]

[rushikeshvartak]

In that case user needs to raise remove account request

[Yaswanth]

If i raise remove account request Remove access task is getting created which is fine, but user is not getting removed from role, if i removed manually from role then only i am able to raise request again, do we have any config which will remove account and user from role as well?

[rushikeshvartak]

if request submitted role and account will be removed

[anirban23]

Hi rushi,

Yaswanth and me is in same team.

what we have done:

• We have picked one user that having an account for 'X' endpoint and has one role access for 'X'
• we have raised removed account request from ARS 
• Remove access task is completed

Result

• user's account removed from the entitlement that is associated with that role and account status is inactive
• But from role level user isn't removed.

Note: we have selected the same entitlement type and role type as you mentioned earlier

Can you please help us what needs to be done, we want to remove user from role as well.

[rushikeshvartak]

• Unfortunately, there is no option as at least one entitlement needs to be there from role to remove role using actionable analytics - Deprovision role action
• https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter17-EIC-Analytics/Managing-An...