Assign SAV Role for DB BASED USER IMPORT

[ag420]

Hello experts

How can i assign a sav roles to identities created from a DB after doing userimportfromDatabase?

I know the S4S method but don't want to configure just to assign SAV roles.

Thanks

[NM]

Hi @ag420 , you might have an option to assign sav role in db user import job.

That is default sav role.

[ag420]

Nope

[NM]

@ag420 ahh.. there is an option somewhere not able to recollect.

Check db connection once for default sav role option.

[rushikeshvartak]

Refer https://forums.saviynt.com/t5/identity-governance/default-savrole-configuration/m-p/76471#M48703

[SumathiSomala]

@ag420 

• Admin - Settings - Configuration Files - externalconfig.properties - edit online 
• Update the config job.ecm.imp.file.defaultrole
• 
• save
• restart application.
• Then run the importJob

[ag420]

My env has more than one source. One is this DB and another is Workday. For the workday job, I have defined the SAV role as well in the job itself. Will this config over the job sav role assignment config?

[ag420]

@NM were you also referring to what Sumanthi suggested as a solution?

[NM]

@ag420 referring to db field in connector.

[SumathiSomala]

@ag420 

• connection default sav role is used for application visibility control under admin menu.
• External config file configuration will work for all new users irrespective of source

[Raghu]

@ag420  As suggested Sumathi - it work any type import and it will assign default role , we also using same function.

[Amit_Malik · Accepted solution]

If you want it to be specific to DB connector then you can use below in user import

<mapper description="This is the mapping field for Saviynt Field name" defaultrole="ROLE_ENDUSER" dateformat="timestamp" incrementalcolumn="LastUpdateTime">

If you want it to be common for all users irrespective of which source they are created from then 

Update the externalconfig.properties - job.ecm.imp.file.defaultrole

[ag420]

Why has Saviynt not documented this 😅 -

<mapper description="This is the mapping field for Saviynt Field name" defaultrole="ROLE_ENDUSER" dateformat="timestamp" incrementalcolumn="LastUpdateTime"> - this is what i was looking for and this works !!!

[rushikeshvartak]

Its in document - https://docs.saviyntcloud.com/bundle/KBAs/page/Content/How-to-stop-triggering-actions-when-a-user-is...