Bulk Enterprise Role Assignment

[sab2]

Hello,

We are currently using enterprise roles as a birth right role for all users. Our question is, how do we bulk assign an enterprise role to all existing users in Saviynt?

We were hoping to do a csv upload and assign each user their specific enterprise role. Is this possible? or what is best way to do this?

Thanks!

[pmahalle]

Hi @sab2 ,

Use bulk upload option using below steps.

1. Navigate to Request Home --> Request Access for Others - Multi Users -->Actions -->Bulk Upload Request.

2. Browse and attach the excel file. Attached the sample file (do not change the format of the file) to assign enterprise roles, update it with your data.

3. Select "What type of request do you want to upload?" : Access

4. Click Run Now.

It will create add access task under completed with state No Action Required in case user already entitlements present in enterprise role.

Let me know if it helps.

[dgandhi]

Follow this 2 post for details:

https://forums.saviynt.com/t5/identity-governance/add-access-tasks-for-entitlements-not-generated-on...

https://forums.saviynt.com/t5/identity-governance/repair-role-retrofit-to-user-mapping-feature-not-u...

[rushikeshvartak]

1. make sure you have attached the workflow (preferably the auto approval workflow) under Global configurations > Request > Bulk > Auto Approve Workflow for Multiuser request upload

2. Follow Process to add multiple enterprise roles to user using file upload https://docs.saviyntcloud.com/bundle/EIC-User-v23x/page/Content/03-mang-accs/ars-req-accs-mult-usr.h...  Navigate to Request Home --> Request Access for Others - Multi Users -->Actions -->Bulk Upload Request -->Action --> Role
3. File format should be xls

USERNAME	ENDPOINT	ACCOUNT NAME	REQUEST TYPE	ENTITLEMENT TYPE	ENTITLEMENT VALUES	START DATE	END DATE	COMMENTS
admin	Endpoint1	admin	Add Enterprise Role	Enterprise Role	Enterprise_Role_1	19-08-2023		Need Access

[sab2]

Thank you for all the replies. I have tried it all and once I submit the bulk request file I see the pop-up a notification is sent to my email but then nothing else happens. No tasks created or roles assigned to profile.

I ensured that the enterprise roles are marked as requestable.

The bulk access auto-approval workflow is set (screenshot attached).

I also attached the file I am importing. I have tried selecting 'Access' and 'Role' on bulk import > Actions. Am I missing a configuration somewhere?

Thank you!

[pmahalle]

Hi @sab2 ,

Any error/exceptions in the logs? share the logs.

[sab2]

This error is only thing really jumping out from logs. 

Error in fetching userAccessExpirydetails :: {}|java.lang.IllegalArgumentException: org.hibernate.hql.internal.ast.QuerySyntaxException: RoleUserAccount is not mapped [select distinct new Map (r.id as id, r.roleName as name, rua.enddate as expiryDate, 'Roles' as accessType) from com.saviynt.ssm.entity.Roles r, RoleUserAccount rua where r.id = rua.rolekey and r.status = 1 and rua.enddate is not null and rua.userkey = :userkey and rua.startdate between :startDate and :endDate]|

[rushikeshvartak]

Try attached

[sab2]

Thank you. I tried that as well (file attached) and I am still seeing the same error in the logs.

[pmahalle]

Hi @sab2 ,

Can you remove Attribute name and value column and try. Attached the sample file

[rushikeshvartak · Accepted solution]

Your file has wrong date format