Context tab is missing in analytic config

[ArvindKumar33]

Hi, our EIC environment version is Saviynt v24.7. 

I would like to create an analytic solution with context, but I can't find it in my configuration when I try to create it. Can you suggest how we can retrieve it context tab in analytic config?

should reflect something below

Regards, Arvind 

[NM]

Hi @ArvindKumar33 , as per my knowledge context tab is available in run time analytics.

[rushikeshvartak]

This is expected behavior when you create analytics first time it will not be visible. once its created context will be available 

[ArvindKumar33]

Thanks Rushikesh!

Now when I am updating analytic selecting context as user, it throws below pop-up.

Regards,Arvind

[rushikeshvartak]

• Add one more column in query userkey as USERCONTEXT.
• Query should have USERCONTEXT column mandatory when context is used 
• https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter17-EIC-Analytics/Managing-An... 

• Controls Based on User

  These controls provide visibility of control data based on user context. When creating these controls, EIC looks for the user name aliased as USER CONTEXT as the name of a column in the result set. If a user logs in to EIC, only the violations associated with the user's username are displayed in the run history. Users with ROLE_ADMIN and ROLE_READONLY SAV roles are exceptional to this visibility constraint and can view violations of all the users available in EIC.

  Sample query

  SQL

  select distinct excv.attributevalue as 'AWS Account', a.name as 'IAM User',u.Firstname as 'First Name', u.lastname as 'Last Name', u.email as 'Email Address', a.Created_on as 'Creation Time',a.LastLogondate as 'Last Login'   , u.userkey as 'USERCONTEXT'   from accounts a INNER JOIN users u on u.username=a.name and u.customproperty1 IN ('T','R','D') INNER JOIN endpoints ep On ep.endpointkey = a.endpointkey INNER Join entitlement_types et ON et.endpointkey = ep.endpointkey INNER JOIN securitysystems sc ON et.systemkey = sc.systemkey INNER JOIN externalconnection exc on sc.externalconnection = exc.externalconnectionkey INNER JOIN externalconnectiontype exct on exc.externalconnectiontype = exct.externalconnectiontypekey and exct.connectiontype = 'AWS'   INNER JOIN externalconnattvalue excv on excv.connectiontype = exc.externalconnectionkey and excv.attributekey = 'AWS_ACCOUNT_ID'   where a.name not like 'xyz'  

   

[PremMahadikar]

Hi @ArvindKumar33 ,

Your initial screenshot where the below query used, this works when you are using context, as you are referencing a column USERCONTEXT.

select username, manager as USERCONTEXT from users where statuskey=1

FYI: Controls Based on User

Try to check in your second screenshot query and add USERCONTEXT if missing and then run. You shouldn't see this error.

If this helps, please consider selecting Accept As Solution and hit Kudos

[ArvindKumar33]

Thanks Rushikesh, Prem!

The query is working fine now. However, after adding analytics and a dashboard to the SAV role, I am getting an access denied error when trying to access the dashboard from intelligence. I have checked the permissions and everything seems okay. The error I am getting is a 403 on this URL https://xyz.saviyntcloud.com/ECMv6/api/idw/res/file?path=/app/usr/theme.json. Can you please let me know which access or feature needs to be added to the SAV role for this?

Regards,
Arvind

[This post has been edited by a Moderator to remove sensitive information.]

[Manu269]

What all features and webservices are added in this custom SAV role?

[ArvindKumar33]

Hi -attached are the list of feature and webservice access.

[rushikeshvartak]

Please check network logs to find which feature and APIs are having issue and giving 403 error . [Sample Image Below]

[ArvindKumar33]

Hi - dashboard is now working, but noticed an issue. For example, if I as a manager check the dashboard first, and then another manager accesses the same dashboard, then in that case another manager is seeing my output in the analytic until the analytic is refreshed. what is the best way to fix it so that none of manager see another manager output from analytic in dashboard first time. 

Note:   

1.My analytic is already runtime.

2. ES tile is selected already in dashboard

3. user context is added in analytic query

4. report is scheduled every 2 min

Regards,Arvind 

[rushikeshvartak]

Context is used for analytics and not for dashboard hence user needs to click on report. 

[ArvindKumar33]

okay, I have a question about refreshing analytics. Is it possible for the dashboard to automatically refresh the analytics when I click on it, rather than displaying someone else data who logged and checked first? Also, reload button on dashboard is not working with the chart properties below.

[{"tileType":1,"data":24,"displayName":"Click on refresh data once you are in","clickable":"yes","objectName":"Reportee Access Details","className":"dashboard-stat red-intense","category":"General","clickType":"analytics"}]

[rushikeshvartak]

• Setup dashboard refresh job and refreshing analytics from dashboard not support.
• schedule report