Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
02/20/2024 08:05 AM
Hi,
We have a use case where we are doing access certification campaigns. In our campaigns, we are using connected and disconnected applications. Our plan is to use actionable analytics to do revocations for the connected applications.
The issue for us is the disconnected application revocations. For our client, we are going to pull a report of the revocations from Saviynt and open tickets in SerivceNow for the disconnected entitlements to manually be removed from the accounts in the target applications. However, once the ServiceNow tickets are closed that the entitlements were removed from the target application then we need to remove the entitlements from the user's accounts in Saviynt.
How can we remove the entitlements from the users in Saviynt? We looked into import csv but does not seem feasible to revoke access this way. Also, we looked into bulk user access requests, but this creates tasks. We do not wants tasks to be created because there is no way for it to be provisioned / deprovisioned.
I read similar forums post linked below but am still unsure. Thank you for any ideas!
Bulk removal of entitlements using file import for... - Saviynt Forums - 58537
Solved! Go to Solution.
02/20/2024 08:14 AM
Hi @sab2 ,
You can do it two way.
1. You can automate this whole process by integrating SNOW as ticketing system with Saviynt.
2. If you don't want to integrate then, Go to Saviynt Pending task and manually complete those remove access pending task once removed the entitlement from target and close the SNOW task.
First option would be the preferred one.
02/20/2024 08:22 AM
Thank you!
They are integrated with ServiceNow, however if we go that route, it creates one ticket in ServiceNow per revocation which could create 100s of tickets per application. So we are going this route to avoid that from happening. (I have an ideas portal open to create one ticket per application for revocations process!)
Also option #2 is lots of manual work in Saviynt so we were trying to see if there was any other workaround options to use.
02/21/2024 07:54 PM
Also option #2 is lots of manual work in Saviynt so we were trying to see if there was any other workaround options to use.
use enhanced query to complete the task
02/22/2024 08:06 AM
Awesome!! Do you have a sample query?
02/22/2024 08:38 PM - edited 02/22/2024 08:38 PM
select taskkey as arstasks__primarykey, 3 as arstasks__status from arstasks where taskkey=20000
Update logic as per your needs
02/20/2024 10:46 PM
Hi @sab2 ,
For the disconnected app pending tasks, just run the wsretry job to complete the tasks so that the entitlements would be removed in Saviynt.