Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Delayed action in User update rule not working

NDY
New Contributor III
New Contributor III

Hello,

It appears that the delayed action functionality in user update rule is not working. 

We have the following use case:

When a user's CP23 is updated, disable account task should be generated immediately and create account task should be generated after 24 hours.

I tried to include both the rules in single user update rule and also tried separating both but did not work either way. Disable account task is creating immediately but create account task never gets generated.

Could you please confirm if the delayed action functionality is not working, or I am missing something? 

NPY_0-1722950017740.png

I believe we can achieve this with analytics also. Could you also please provide the analytics query as this is a time sensitive implementation?

16 REPLIES 16

rushikeshvartak
All-Star
All-Star

Did you checked logs / execution trail


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NM
Honored Contributor III
Honored Contributor III

Hi @NDY , ideally it won't work as you are trying to create a account task for a user who already have an account.


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

NDY
New Contributor III
New Contributor III

We have a process in between to change the manually suspended accounts to "suspended from import service". I can create the create account task manually.

NM
Honored Contributor III
Honored Contributor III

@NDY , manually via ARS?


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

NDY
New Contributor III
New Contributor III

No, via enhanced query execution job.

NM
Honored Contributor III
Honored Contributor III

Yes @NDY but not supported via technical rule..


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

NDY
New Contributor III
New Contributor III

I see the rule once run in execution trail but don't see anything in the logs. The rule is in processed state in execution trail.

What about user update history


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NDY
New Contributor III
New Contributor III

I see the rule being run in User update history.

Then you need to validate logs to check issue


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NDY
New Contributor III
New Contributor III

Is there a way to write an analytic query to generate a create account task for the endpoint when there is a change in CP23 and disable account task is created?

Create account is not allowed action for actionable report


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NDY
New Contributor III
New Contributor III

What is " 0 Days" in delayed action? 

NPY_0-1722951797363.png

 

task start will be task creation + 0 day

task created on 6th Aug then , task will be processed on 6th Aug (0days) , 7th Aug (1 day)


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NDY
New Contributor III
New Contributor III

Okay, I was trying to see if there was any difference on having 0 day vs not mentioning any "execute at" value.

Please click the 'Accept As Solution' button on the reply (or replies) that best answered your original question and hit 'Kudos' button 👍.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.