Add Access to Inactive Account

[abm15]

Hi,

I have a use case where I am onboarding a new user in Saviynt with a future dated start date.

I am provisioning the user to Active Directory with some birthright access using a technical rule. The account and access is provisioned upon user creation, but the account is provisioned to AD in a disabled state - only to be enabled on the user's effective start date.

Leading up to the user's start date, I want to give the manager an opportunity to request additional access the user may need before their start date. However, after Saviynt's initial birthright provisioning, I am not able to request new access for the account - I assume because the account status is Inactive.

Can I configure Saviynt to allow access requests for an Inactive account? Any advice on how to achieve this use case?

Thank you.

[sudeshjaiswal]

Hello @abm15,

Currently, this is not achievable.

Thanks

[rushikeshvartak]

Enable below option to request access for inactive accounts  in global configuration

[rituparna_pwc]

@rushikeshvartak , this does not create tasks. Even we have this same issue

[abm15]

This configuration will show the inactive accounts in the ARS, but I cannot request new access for the account.

[rushikeshvartak]

Yes you can't request for inactive account. 

Please raise idea ticket for enhancement 

[rituparna_pwc]

@rushikeshvartak , yes got to know that from Saviynt. This is not a good feature from them, I dont understand why Saviynt need to restrict for no reason.

[Manu269]

@abm15 inactive accounts only shows up in ARS but does not create a task at all.

Any business use that you can add and post the idea link that you create.