Bulk application role request via MultiUser in ARS

[Yaswanth]

Hi Team,

I am trying to upload the bulk role request thru ARS via MultiUserRequest. 

File used

Failed message :

Global configuration

Could you please help here to resolve this issue.

[rushikeshvartak]

Type should be Add Application Role

: MultiUser-Access-Upload-File.xls

Refer https://docs.saviyntcloud.com/bundle/EIC-User-v24x/page/Content/03-mang-accs/ars-req-accs-mult-usr.h...

[stalluri]

Understanding the Parameters for Role Requests

Fill in the values for the following columns for each role request:

Sample excel file for uploading the multi-user access request : MultiUser-Role-Upload-File.xls

• Username: Specify the name of the user for whom you want to make the request. It accepts case insensitive letters.

• Role Name: Specify the name of the role for which you are submitting the request.

  • Request Type: Specify the type of request.

    • Add: Specify this to request for adding a role to the user.

    • Remove: Specify this to request for removing an existing role access from the user.

    • Update Access End Date: Specify this to request updating the expiration date of roles. This is applicable to enterprise roles.

    • Dynamic Attributes: Specify this to request for adding the dynamic attributes for the role.

  • Start Date: Specify the start date of the role.

    Note

    Do not specify the start date if you are submitting a request for updating the enterprise roles' end date. A validation failure message will be shown if the start date is specified for the Update Access End Date requests.

  • End Date: Specify the end date of the role.

  • Comments: Specify a comment to summarize the request.

  • Role Type: Specify the type of role, for example, Enterprise Role, and Firefighter Role.

  • Attribute Name: Specify the attribute name.

  • Attribute Value: Specify the attribute value.

Interpreting the Request Validation Messages

EIC sends validation messages to requesters based on the status of the submitted requests. Some of the common validation messages are listed in the following table:

Validation TypeValidation Message

Request Type: Access
User (Existence)	User: <<Username> does not exists or is inactive>
User (Not requestable)	User: <Username> does not have account in the Endpoint: <Endpoint Name>.
Endpoint (Existence)	Endpoint: <Endpoint Name> not found
Entitlement Type (Existence in the Endpoint)	Entitlement type <Entitlement Type> does not belong to endpoint <Endpoint Name>
Entitlement Type (Not requestable)	Entitlement type <Entitlement Type> is not requestable
Workflow Association validation to Security System in which Request is being made (For Add Access)	No workflow associated.
Workflow Association validation to Security System in which Request is being made (For Remove Access)	No workflow associated.
New Account Request Account with given Name (Existence) check	Account: <Account Name> already exists.
New Account Request If Any Account Exist and new Account Request is disabled to the endpoint	Active Account for user exists and new account request is disabled.
Add Access: Active Entitlement Value Existence with given Entitlement value in (given Entitlement Type/Endpoint)	Active Access: <Entitlement Value> not found for Entitlement Type: <Entitlement Type> and endpoint <Endpoint>
Add Access Active Account check	User:<Username> does not active Account: <Account Name> in Endpoint: <Endpoint Name>
Remove Access Access Assigned/not assigned to the Account	Access: <Entitlement Value> not assigned to account <Account  Name>
Dynamic Attributes	Dynamic Attributes: <<Dynamic Attribute> not found>
Endpoint Access Query	Access Query validation failed
Endpoint Active Account	User:<Username> does not have active Account: <Account Name> in Endpoint:<Endpoint Name>
User not have Manager	You cannot make a request because your manager is inactive or unavailable. Please contact HR to update your manager information.
Request Type: Roles
User (Existence)	User: <<User name> does not exists or is inactive>
Role (Active/Inactive)	Role: <Role name> is not active
Role (Requestable/Non Requestable)	Role: <Role name> is not requestable
Role Type (Correct/incorrect)	Role Type: <Role Type> not correct
Role (Assigned/ Not assigned) to user	Role: <Role Name> already assigned to User: <User Name>
Dynamic Attribute found in roles for user or not	Dynamic Attribute: <Dynamic Attribute Name> Value: <Dynamic Attribute Value> not found in Role: <Role Name> for User: <User Name>

[Yaswanth]

Team,

Thanks for your responses, using the below .xls file for application role bulk request.

I have tried with Dates and without dates, but still upoad is failing with below error.

http-nio-8080-exec-114-7qlbx	ERROR	USER: 369614, FILE: BulkRoleRequestUploadFile.xls, exception while scanning
null-7qlbx		org.springframework.web.client.HttpClientErrorException: 401 Unauthorized at com.saviynt.scanner.VirusScannerService.getToken(VirusScannerService.groovy:98) at com.saviynt.scanner.VirusScannerService.createHeader(VirusScannerService.groovy:84) at com.saviynt.scanner.VirusScannerService.performScan(VirusScannerService.groovy:39) at ecm.VirusScanFilters$_closure1_closure2_closure3_closure8.doCall(VirusScanFilters.groovy:85) at ecm.VirusScanFilters$_closure1_closure2_closure3.doCall(VirusScanFilters.groovy:76) at grails.plugin.springsecurity.web.filter.GrailsAnonymousAuthenticationFilter.doFilter(GrailsAnonymousAuthenticationFilter.java:53) at com.saviynt.webservice.SaviyntRestAuthenticationFilter.doFilter(SaviyntRestAuthenticationFilter.groovy:159) at grails.plugin.springsecurity.web.authentication.logout.MutableLogoutFilter.doFilter(MutableLogoutFilter.java:62) at grails.plugin.springsecurity.web.SecurityRequestHolderFilter.doFilter(SecurityRequestHolderFilter.java:59) at com.mrhaki.grails.plugin.xframeoptions.web.XFrameOptionsFilter.doFilterInternal(XFrameOptionsFilter.java:69) at com.brandseye.cors.CorsFilter.doFilter(CorsFilter.java:82) at java.lang.Thread.run(Thread.java:750)

please suggest

[stalluri]

@Yaswanth 
Can you please share the full log to understand the problem better?

                    Refer: https://forums.saviynt.com/t5/help/faqpage/title/WhenNotifyAboutPII

❗🚫⚠️❗Do not upload any attachments or data that contain sensitive information, such as PII, IP Addresses, URLs, Company/Employee Names, Email Addresses, etc. ❗⚠️ 🚫❗

[Yaswanth]

please find the log

[This message has been edited by moderator to mask sensitive information]

[rushikeshvartak]

Please raise support ticket for virus error

[stalluri]

@Yaswanth 
This seems like a defect. I don't see anything in the logs. Create a Support ticket. They can help you with more details.

[Yaswanth]

It is fixed in test environment but getting below error in Prod.

Invalid Start Date entered.Date should follow the format: “MM/dd/yyyy HH:mm:ss” or “MM/dd/yyyy“

[stalluri]

@Yaswanth 
Can you also share the logs in the text file.

                    Refer: https://forums.saviynt.com/t5/help/faqpage/title/WhenNotifyAboutPII

❗🚫⚠️❗Do not upload any attachments or data that contain sensitive information, such as PII, IP Addresses, URLs, Company/Employee Names, Email Addresses, etc. ❗⚠️ 🚫❗

[rushikeshvartak]

Please share import sheet file .

[Yaswanth]

Username	Endpoint	Account Name	Request Type	Entitlement Type	Entitlement Values	StartDate	End Date	Comments
T12345	Sentient	T12345	Add Application Role	Application Role	Sentient MDoc Creation Role Non Production	10/08/2024		Add User to Role 1

[rushikeshvartak]

I have also seen same error and issue is date format in xls file

Date format 

Jul 06, 2022 - 17:00

[Yaswanth · Accepted solution]

Yes, its resolved now, Date column format we have to set as Text and date format should be mm/dd/yyyy

[Yaswanth]

Service Name	Class Name	Thread Name	Log Level	Message
ecm	workflow.JbpmworkflowmanagementController	http-nio-8080-exec-590-6wmkq	DEBUG	No redirection to v6. Entering showmyhistoryrequests
ecm	controllers.HomeController	http-nio-8080-exec-127-7cxlv	DEBUG	check session
ecm	rest.JwtService	http-nio-8080-exec-130-7cxlv	DEBUG	Parsed an HMAC signed JWT
ecm	rest.JwtService	http-nio-8080-exec-130-7cxlv	DEBUG	Parsed an HMAC signed JWT
ecm	ws.Restfulv5Controller	http-nio-8080-exec-130-7cxlv	DEBUG	Disable Audit Logging : true
ecm	ws.Restfulv5Controller	http-nio-8080-exec-130-7cxlv	DEBUG	Default max limit is set to 50
ecm	ws.Restfulv5Controller	http-nio-8080-exec-130-7cxlv	DEBUG	inside getEcmVersion
ecm	services.SaviyntCommonUtilityService	http-nio-8080-exec-130-7cxlv	DEBUG	contentType - text/json
ecm	services.SaviyntCommonUtilityService	http-nio-8080-exec-130-7cxlv	DEBUG	contentTypeFromConfig - application/json
ecm	scanner.VirusScannerService	http-nio-8080-exec-125-7cxlv	ERROR	USER: 70711, FILE: SENTINENT_File_Batch1.xls, exception while scanning
ecm		null-7cxlv		org.springframework.web.client.HttpClientErrorException: 401 Unauthorized at com.saviynt.scanner.VirusScannerService.getToken(VirusScannerService.groovy:98) at com.saviynt.scanner.VirusScannerService.createHeader(VirusScannerService.groovy:84) at com.saviynt.scanner.VirusScannerService.performScan(VirusScannerService.groovy:39) at ecm.VirusScanFilters$_closure1_closure2_closure3_closure8.doCall(VirusScanFilters.groovy:85) at ecm.VirusScanFilters$_closure1_closure2_closure3.doCall(VirusScanFilters.groovy:76) at grails.plugin.springsecurity.web.filter.GrailsAnonymousAuthenticationFilter.doFilter(GrailsAnonymousAuthenticationFilter.java:53) at com.saviynt.webservice.SaviyntRestAuthenticationFilter.doFilter(SaviyntRestAuthenticationFilter.groovy:159) at grails.plugin.springsecurity.web.authentication.logout.MutableLogoutFilter.doFilter(MutableLogoutFilter.java:62) at grails.plugin.springsecurity.web.SecurityRequestHolderFilter.doFilter(SecurityRequestHolderFilter.java:59) at com.mrhaki.grails.plugin.xframeoptions.web.XFrameOptionsFilter.doFilterInternal(XFrameOptionsFilter.java:69) at com.brandseye.cors.CorsFilter.doFilter(CorsFilter.java:82) at java.lang.Thread.run(Thread.java:750)
ecm	scanner.VirusScannerService	http-nio-8080-exec-125-7cxlv	DEBUG	VirusScanFilters took 1304 ms
ecm	workflow.WorkflowmanagementController	http-nio-8080-exec-125-7cxlv	DEBUG	Upload Type selected: entitlement
ecm	workflow.WorkflowmanagementController	http-nio-8080-exec-125-7cxlv	DEBUG	Reading Data and preparing for preview.....
ecm	sync.SyncFileVersionUtilityService	http-nio-8080-exec-125-7cxlv	DEBUG	checking for filename
ecm	sync.SyncFileVersionUtilityService	http-nio-8080-exec-125-7cxlv	DEBUG	filename valid = true
ecm	workflow.WorkflowmanagementController	http-nio-8080-exec-125-7cxlv	DEBUG	useNewUploadFramework = ###FALSE####

[NM]

@Yaswanth still see the scanner error. Did saviynt support team helped you out like mentioned by @rushikeshvartak and @stalluri after raising support ticket?