Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Delete Application bypasses approval process

Mukul
New Contributor III
New Contributor III

Noticed a weird behaviour and wanted a confirmation.

 

Under manage my access, if you select "Delete" corresponding to the application, it skips the approval process for underlying entitlements as well and competes the tasks without any pending task.

The entitlements request is configured to use workflow and we expect Saviynt to follow the workflow if there is remove access task for entitlements 

 

Mukul_0-1704930983387.png

Any suggestions please?

17 REPLIES 17

rushikeshvartak
All-Star
All-Star

For Delete Account - Security System --> Access Remove Workflow  is used.


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

Thanks and we do have approval attached to Access Remove Workflow. See below. This is the same workflow which is used for Add Access Workflow

 

Mukul_0-1704938871456.png

 

Can you share workflow to check why its becoming auto approved with no task


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

Screenshot 2024-01-11 at 1.46.59 pm.png

 Yes here it is

 

Workflow is incomplete there is no end block


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

sorry what do you mean? This has been working fine for all our new requests

 

from Grant Access  & Rejected Access - Down Arrow should go to End Request block

rushikeshvartak_0-1704942811926.png

 


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

okay sure...Let me try that. You recon thats the issue our delete approvals are not kicking in?

 

Mukul
New Contributor III
New Contributor III

Hello, I updated the workflow and tested the application removal. Still the same. See below

Mukul_0-1704950733811.png

 

 

Mukul_1-1704950757233.png

 

enable "Create Dependent Entitlement Task for Remove Access"  under endpoint


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

Screenshot 2024-01-11 at 5.28.43 pm.png

 It's already on

 

  • Instead of Entitlement owner try with manager approval in wf

Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.

But that's not what we want. We want during the delete of application, all the corresponding applications shall go for the approval process

 

Mukul
New Contributor III
New Contributor III

Hi Rushikesh,

Found this in logs.

"2024-01-11T22:03:41.414+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","Auto approval case "
"2024-01-11T22:03:41.415+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","creating acc appr entry for Request access 414"
"2024-01-11T22:03:41.426+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","creating acc appr entry for Request access 414 done"
"2024-01-11T22:03:41.426+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","Completing request.. 213"
"2024-01-11T22:03:41.429+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","Completed request.. 213"
"2024-01-11T22:03:41.429+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","Close Request Called Status Completed grails.validation.ValidationErrors: 0 errors ARS_RequestsID=213"
"2024-01-11T22:03:41.429+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","isautoapproved = true"
"2024-01-11T22:03:41.429+00:00","ecm","services.WorkflowService","http-nio-8080-exec-63-n4x59","DEBUG","Is auto approved case..

Mukul
New Contributor III
New Contributor III

"2024-01-11T22:03:41.560+00:00","arsms","c.s.s.a.s.impl.RequestAccessServiceImpl","http-nio-8787-exec-5-sl479","DEBUG","Approvers of request :: XXX:: [Mukul Mahajan (XXXXXXX)] "

Hi @rushikeshvartak : it works when its assigned to manager

Since remove account does not have entitlement your workflow is not working add if else block after start as below condition

requestcounts.DELETE_ACC_REQUESTS_COUNT > 0

if true then grant block

else entitlement owner ( remove access approval)

 


Regards,
Rushikesh Vartak
If you find this response useful, kindly consider selecting 'Accept As Solution' and clicking on the 'Kudos' button.