Attestation dashboard permissions - SAV role

[DanJ]

Hi, I've created an Attestation Admin SAV role, which can fully manage attestation campaigns. This role has an attestation dashboard which grants access to a bunch of data. Most of the tiles are click-through to analytics. These analytics have all been added explicitly to the SAV role.

When I click on the tile to access the analytics detail I receive an access denied error:

this is a failure accessing the URL:

/dashboard/createDynamicURL 

The user is able to view the analytic history if they browse directly to that page.

I can't make this work without adding the user to ROLE_ADMIN, which I do not want to do.

Any ideas? Which permission am I missing? I've pretty much tried every feature and webservice option.

[Dhruv_S · Accepted solution]

Hi @DanJ 

Does the SAV Role has below feature access?

Regards,

Dhruv Sharma

[rushikeshvartak]

Saviynt does not follow least privileges access. Adding this access end user are able to update dashboard config as they get dashboard configuration list page access . If you hit url directly. I have raised idea on it  please look into it

[rushikeshvartak]

Add Admin Dashboard Feature

[DanJ]

This feature does indeed fix this problem, @Dhruv_S thanks. However @rushikeshvartak I am concerned that it grants too much privilege, I will review your submission on the ideas portal. Thanks guys 🙂

[rushikeshvartak]

@DanJ  Submit new Idea

idea i have created for admin dashboard 

https://ideas.saviynt.com/ideas/EIC-I-5181

since your issue is resolved you can close thread