We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

How to assign a SAV Role to a Large Number of users?

yogesh
Regular Contributor III
Regular Contributor III

How to assign a SAV Role to a Large Number of users?

9 REPLIES 9

smaru3
New Contributor
New Contributor

We had the same requirement but didn't find import option. We ended up inserting userkeys into user_savroles table

rushikeshvartak
All-Star
All-Star

If you are using saviynt 2 saviynt connector then you can do using Technical rule/analytics as we provision entitlement.

rushikeshvartak_1-1655414381803.png

 

or if its default sav for all users then assigned from job

rushikeshvartak_0-1655414367600.png

 

Last option insert from DB if you are not using Saviynt 2 saviynt


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

sahajranajee
Saviynt Employee
Saviynt Employee

Hello,

Please use SaviyntForSaviynt for importing Sav Roles as entitlements . Then you can use a SaviyntforSaviynt user import to trigger a rule to assign the SAV Roles.

 


Regards,
Sahaj Ranajee
Sr. Product Specialist

yogesh
Regular Contributor III
Regular Contributor III

@sahajranajee @rushikeshvartak 

Thanks for suggestions

I want to have a scheduled process that checks certain user attributes (say customproperty10 = 'true') and assign a certain SAVROLE where the condition matches.
How can I achieve this with your suggested methods? 

sahajranajee
Saviynt Employee
Saviynt Employee

Hello,

When you enable SaviyntForSaviynt, SAVRoles will get imported as Entitlements under the SaviyntForSaviynt application. 
Your use case looks to be a detective use case which needs to be run as retrofit. 
You can do two things :
1. Use the userimport xml on SaviyntForSaviynt connector to write your conditions as SQL query and update a certain user attribute.

This user attribute update should then trigger a User Update Rule to evaluate a tech rule to assign the required Sav Role.

2. You can write an actionable analytics with your query and assign the SAV role as entitlement via it. This will not be recommended for a large dataset but works well when the dataset is smaller.

 


Regards,
Sahaj Ranajee
Sr. Product Specialist

yogesh
Regular Contributor III
Regular Contributor III

Turns out this is more convoluted than I expected. 
Should be simpler to manager such a simple thing.

Saviynt should have a Fresh Desk guide article for this 😄

sahajranajee
Saviynt Employee
Saviynt Employee

Sure Yogesh!

We will get this KBA added soon!

 


Regards,
Sahaj Ranajee
Sr. Product Specialist

yogesh
Regular Contributor III
Regular Contributor III

That's awesome!

yogesh
Regular Contributor III
Regular Contributor III

While Saviynt is working on that KBA, I have found that a quick and kinda 'dirty' way to achieve this, is by running a custom query job.

Custom Query Jobs are marked by Saviynt as deprecated so they may be removed in future but as of writing this here is how I did it:

1. Create a CUSTOMQUERYJOB
2. Add below query to it (update as required):

INSERT INTO user_savroles 
(userkey, rolekey)
select u.userkey, sr.rolekey from 
users u,
savroles sr
where u.owner = 'yogesh'
and sr.rolename = 'ROLE_BASIC_USER';

3. ... (wait)
4. PROFIT!

And that's it!

Assign any sav role to any user population.