Can we provide readonly access for on endpoint

[Saksi]

Hi,

Our requirement is to provide the access of accounts and entitlements for only one endpoint in readonly mode to specific users. Can we achieve it with the help of Savrole. If yes what all feature access and web service will be required?

I tried creating a savrole in readonly mode and i provided feature access and web service related to security system and endpoint. I have also added that savrole as the default savrole in connection.

Any suggestions how we can achieve this requirement.

[NM]

@Saksi what is the current behaviour do you see?

You will have to add admin: account and admin:ss too

Share the feature access list.

[Saksi]

Hi @NM,

These are the feature access and web service which i have added.

With this, I am able to see all the accounts from multiple endpoints. For security system it is giving access denied error.

[NM]

@Saksi try adding endpoint name in the sav role details page.

[Saksi]

@NM : It is still the same.

[rushikeshvartak]

• Did you add sav role under connection
• Accounts / entitlements are controlled with connection. 
  
  
• You need to add sav role under connection attached to security system 
• under Default sav role
• 
• Refer https://forums.saviynt.com/t5/identity-governance/disconnected-application-accounts-are-not-listing-...

https://forums.saviynt.com/t5/identity-governance/disconnected-application-accounts-are-not-listing-...

https://forums.saviynt.com/t5/identity-governance/feature-access/m-p/114190#M76350

[Saksi]

@rushikeshvartak : I have already mentioned it in default savrole in connection. But no luck.

[rushikeshvartak]

• What is type of application ? does connection attached to security system ?
• Please provide video https://gifcap.dev/
• ⚠️ Reminder: Mask possible PII such as employee names, email addresses, phone numbers, IP addresses, account details, company-specific URLs, and client names before sharing.⚠️