Dynamically removing roles through an actionable analytics

[Rosy_J_Nsonde]

Hi,

I have followed the steps recommended in the below post in order to dynamically remove roles from users.

https://forums.saviynt.com/t5/forums/postpage/choose-node/true/board-id/feedback

Unfortunately, the removal part is not happening.

The analytics job is scheduled to run every 4 hours.

As shown below, the analytics job identifies violations, but fails to remove the access.

Below is a screenshot of the actionable report.

I have included the accountkey, the rolekey and the userkey in the query as well as the default action.

What am I doing wrong? Why is the access not getting removed?

Thanks.

[Rajesh-R]

@Rosy_J_Nsonde  - Could you check if there are any tasks created for the Accesses to remove? "Remove Access Tasks" for the user?

[Rosy_J_Nsonde]

Hi Rajesh,

The removal tasks are created but fail on the DELETE operation.

[SumathiSomala]

@Rosy_J_Nsonde Did you take action on the records found in analytics report ?

When action is performed on a record, a task is created for removing user access for the entitlements associated with the roles.

If yes ,Check there are any tasks created for Remove Access in pending tasks

Managing Actionable Analytics Controls (saviyntcloud.com)