How to assign a SAV Role to a Large Number of users?

[yogesh]

How to assign a SAV Role to a Large Number of users?

[smaru3]

We had the same requirement but didn't find import option. We ended up inserting userkeys into user_savroles table

[rushikeshvartak]

If you are using saviynt 2 saviynt connector then you can do using Technical rule/analytics as we provision entitlement.

or if its default sav for all users then assigned from job

Last option insert from DB if you are not using Saviynt 2 saviynt

[sahajranajee]

Hello,

Please use SaviyntForSaviynt for importing Sav Roles as entitlements . Then you can use a SaviyntforSaviynt user import to trigger a rule to assign the SAV Roles.

[yogesh]

@sahajranajee @rushikeshvartak 

Thanks for suggestions

I want to have a scheduled process that checks certain user attributes (say customproperty10 = 'true') and assign a certain SAVROLE where the condition matches.
How can I achieve this with your suggested methods? 

[sahajranajee]

Hello,

When you enable SaviyntForSaviynt, SAVRoles will get imported as Entitlements under the SaviyntForSaviynt application. 
Your use case looks to be a detective use case which needs to be run as retrofit. 
You can do two things :
1. Use the userimport xml on SaviyntForSaviynt connector to write your conditions as SQL query and update a certain user attribute.

This user attribute update should then trigger a User Update Rule to evaluate a tech rule to assign the required Sav Role.

2. You can write an actionable analytics with your query and assign the SAV role as entitlement via it. This will not be recommended for a large dataset but works well when the dataset is smaller.

[yogesh]

Turns out this is more convoluted than I expected. 
Should be simpler to manager such a simple thing.

Saviynt should have a Fresh Desk guide article for this 😄

[sahajranajee]

Sure Yogesh!

We will get this KBA added soon!

[yogesh]

That's awesome!

[yogesh · Accepted solution]

While Saviynt is working on that KBA, I have found that a quick and kinda 'dirty' way to achieve this, is by running a custom query job.

Custom Query Jobs are marked by Saviynt as deprecated so they may be removed in future but as of writing this here is how I did it:

1. Create a CUSTOMQUERYJOB
2. Add below query to it (update as required):

INSERT INTO user_savroles 
(userkey, rolekey)
select u.userkey, sr.rolekey from 
users u,
savroles sr
where u.owner = 'yogesh'
and sr.rolename = 'ROLE_BASIC_USER';

3. ... (wait)
4. PROFIT!

And that's it!

Assign any sav role to any user population.