Execute on is working fine for in-active users but if user get active then its creating problem

[Israr]

Hi Team,

We have a requirement where if user gets disabled today then his access should get revoke after 3 days to achieve this we have used the option in user update rule "execute on" where we have selected the 3days as time and it created the task for remove access but it got executed after 3days but when user get activated within three days those remove access task should not get completed it should move either to no action require status or discontinue it.

But here even though the user got rehire or active within three days those remove access task getting provisioned successfully which is not expected.

Could you please help us how to solve this problem?

Thanks!

Regards,

Israr Ahmed M

[rahul_p]

Hello @Israr ,

When user getting active again, you can use the user update rule with action as "Discontinue Pending Task".

It will remove the pending task for activated users.

Also, in global configuration, make sure you check below option as well:

Discontinue Pending Task on User Rehire

Regards,
Rahul
Please accept this as solution & give kudos if it resolves your issue.

[NM]

Hi @Israr , you can use 

Discontinue Pending Task on User Rehire field in global configuration to solve the issue ..we are using the same config in our environment.

[Israr]

Hello

Thanks that option is already enabled in global config.

Regards,

Israr Ahmed M

[rushikeshvartak]

• Question is why does user become reactive ? Is this something you need to handle in user update rule /Prepeocessor

[Israr]

Hello Rushikeshvartak,

Thanks for the response!

The user will get active again if he/she converted from contractor to employee and also there are some cases where user will get active again if he/she gets rehired within 3days or one month.

Thanks!

Regards,

Israr Ahmed M

[rushikeshvartak]

• If start date is future then tasks should not be processed.
• Please raise support ticket for reported issue.

[rahul_p]

Hello @Israr ,

When user getting activated by satisfying some condition right, then configure the user update rule for that.

If user active again or xyz condition :

Action =>  Discontinue Pending Task

It will remove the pending task for activated users.

Both global config option[Discontinue Pending Task on User Rehire] + user update rule action[Discontinue Pending Task].

Saviynt needs both to discontinue the task.

Regards,
Rahul
Please accept this as solution & give kudos if it resolves your issue.