Add access Task is getting discontinued automatically for inactive users

[Harsha]

Hello,

we are trying to assign few groups based on rules for both existing users and future hire. we used user update rule to re run technical rule.So for future  hire it is creating add access task  but after running provisioning job it is moving to completed task automatically with status 'discontinued'. And provisioning comment says inactive user. 

Am I missing any global configuration? or is it defect in saviynt?

[RakeshMG]

Please check if the user for whom the task is generated is Active user or not.

[DixshantValecha]

I appreciate you reaching out to the Saviynt forums.

Based on the information you have provided, it sounds like your user update rule is triggering a technical rule that is creating an add access task for future hires. However, when the provisioning job runs, it is marking the task as completed with a status of "discontinued" and leaving a comment saying that the user is inactive.

One possible explanation for this behavior is that the provisioning job is trying to create an account or add access for a user who has not yet been officially hired or who has been marked as inactive in your  system. Depending on how your provisioning job is configured, it may be set to automatically mark such users as "discontinued" or inactive.So Please check if the user for whom the task is generated is Active user or not. 

[Harsha]

Hello,

Thank you for reply, user is inactive as its future hire. Is there any global configuration that is marking add access task automatically inactive? 

[RakeshMG]

For inactive user if any tasks are created the provisioning job pick the tasks and moves the task to completed task automatically with status 'discontinued'. No other config changes are required.

[Harsha]

Hello,

Thank you for your quick response. Scenario we tried is

-changed the location of inactive user then using user update rule rerun technical rule which should assign groups based on its changed location. But it is moving to completed tasks and status is 'discontinued'

what we want is if location changes for future hire(inactive user today) then add access task should assign the group. 

[rushikeshvartak]

if user is active then only access  can be provisioned