ARS - Show Inactive Users

[vermilyacd1]

Hopefully an easy one that I'm just missing... how can we show inactive users in the ARS User Selection screen (Request Access for Others tile)? We need to be able to make access requests for inative users.

[avinashchhetri · Accepted solution]

I do not think you can do that. Saviynt does not allow requests to be raised for Inactive users. 

Could you elaborate on your use case ?

Regards,

Avinash Chhetri

[vermilyacd1]

Users who leave the organization are marked as disabled but in the client's current process, their access is not fully stipped out, accounts remain in AD groups for example. Owners then need to remove the account from some groups but cannot select the inactive user in the ARS user list as inactive users are not shown.

[rushikeshvartak]

Endpoint access query by default having flag user.statuskey=1 i.e. only active user

Hence alternative solution

• Create rule which will triggered task once user is inactivated in HR
• Create actionable analytics Report (action as Deprovision Access) where  admin can take action manually or you can set default action 

[vermilyacd1]

Saviynt doesn't support this, we have an enhancement request submitted.