BUSINESS JUSTIFICATION- Mandatory

[PuspanjaliM]

Hi Team,

In order to make "BUSINESS JUSTIFICATION" Mandatory, we enabled the below option in global configuration as per the support document.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter06-EIC-Configurations/Config...

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter06-EIC-Configurations/Config...

Request

Role Request

In one of the posts, I read about "SOX criticality High", Our business team doesn't allow that.

I'm not sure why it's not working.

[pmahalle]

Hi @PuspanjaliM ,

Refer below forum:

https://forums.saviynt.com/t5/identity-governance/need-to-know-how-to-make-comments-mandatory-while-...

[PuspanjaliM]

Hi Paddy,

Thank you for your quick support, but in your suggested post, the requester wanted to make the "comment" mandatory.

However, we enabled the suggested option as per the link; it's only making "comment" mandatory, not "Business justification".

PFA

Our requirement is to make "Business justification" mandatory

[This message has been edited by moderator to mask PII info]

[dgandhi]

Yes SOX Critical needs to be set to High for business justification to be mandatory.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Creat...

Sox Critical	Select the criticality of the SOX. On selecting the Sox critical value, the Business Justification is made mandatory for entitlements while submitting the request. The options are: Very Low Low Medium High Critical
Sys Critical	Select the criticality of the system. On selecting the Sys critical value, the Business Justification is made mandatory for entitlements while submitting the request. The options are: Very Low Low Medium High Critical

[PuspanjaliM]

Hi Devang,

Thank you for sharing the above solution.

However, I can see that by using this particular solution, we can make "Business Justification" mandatory for those entitlements that are created on the Saviynt UI (by going to the Entitlement panel).

What about the imported entitlement? 

Our requirement is that if the user raises any ARS request, then it should have a "Business Justification" as mandatory.

I'm not sure if this is the product defect on this current version. I believe Saviynt should provide functionality like "comment" to make "Business Justification" mandatory.

If I raise this concern with the Freshdesk team, can they fix it?

[dgandhi]

Run custom query job to change the value of sox critical for all the imported entitlements.

[dgandhi]

Also another way I could think of is to have SOX critical value  included in the import JSON only.

[PuspanjaliM]

Hi Devang,

Thanks for helping us out here. I feel these are workaround solutions.

Should we call it a new idea for Saviynt to make OOTB for "business justification" mandatory, similar to how we have OOTB for "comment"?

[dgandhi]

Yes.

[rushikeshvartak · Accepted solution]

If you want to make business justification mandatory for each entitlement selected in request you need to make SOX Critical/Financial/Privileged Flag as High or Very High.

This is not best solution but this how product is work currently, Idea has already placed by me on same.

https://ideas.saviynt.com/ideas/EIC-I-4579