Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/04/2024 11:40 PM
Hi Team,
"We have a use case that requires us to remove all of a User's SAV Role when they are terminated. However, the 'End User' SAV role should not be removed. Could you please assist in how to achieve this?"
04/05/2024 12:39 AM
For all Sav roles are you managing any endpoint application
04/05/2024 01:36 AM
yes
04/05/2024 01:48 AM
so Saviynt application have all roles as entitlments right?
when user terminated based on user update rules it will create remove access task right for that also
04/05/2024 02:00 AM
yes, can we filter out to remove all sav roles except end user sav role?
04/05/2024 02:07 AM
end user sav role is default sav role right, not assigning via request so it should come in request screen also
end user sav role is default sav role right, we can't request via request form am right ?
04/05/2024 02:37 AM
we have a custom end user sav role, which are assigned when user customproperty35 value is set to "NOTMANAGER"
04/05/2024 03:33 AM
@AtrayeeDutta you can try one option is that you can create actionable analytics scheduled to run once or twice as per your need, build the query in such a way that you are able to fetch all the account key and ent key and perform deprovision access as default action.
Sample : Configuring Allowed Actions (saviyntcloud.com)
04/05/2024 04:44 AM
What is business use case to keep ROLE_USER with terminated users ?
In case users get rehired you can re-enable account and add entitlement
04/10/2024 03:00 AM
Hi,
Business user case is to keep ENDUSER_SAV_ROLE as birthright, after termination all SAVRoles should be removed except ENDUSER_SAV_ROLE
04/10/2024 08:32 PM
You can go with actionable analytics to add back ENDUSER_SAV_ROLE for terminated users.