How to filter enterprise roles in Saviynt for ServiceNow App?

[jralexander137]

We have roughly 550 enterprise roles, the vast majority assigned automatically based on assignment criteria through technical rules. However, we have a dozen or so that are not auto assigned and we want those to be the only ones showing in the ServiceNow App Request Form. Is there some way to get only those roles to show in the request form for requesting access?

These two forums posts seem to indicate that role and entitlement filtering is not really possible...is that really the case? Even if these roles are the only ones set to requestable?

https://forums.saviynt.com/t5/identity-governance/saviynt-app-for-servicenow-does-not-honor-requesta...

https://forums.saviynt.com/t5/identity-governance/saviynt-app-for-servicenow-filtering-entitlements/...

[adarshk]

Currently, it's not possible to hide the roles based on the requestable field. however, as a workaround, you can define the condition in the workflow and auto-reject the request if the role that has requestable set to false is being requested. With this approach, you can also add the role names (that need to be assigned only through rules) in the if else condition block and auto-reject it.

[jralexander137]

Doesnt this mean that the roles will show up in the form and would just be auto-rejected via workflow? We don't want a bunch of unusable roles to be shown. Only like 12 of the 500+ roles.

[rushikeshvartak]

You can make role - requestsable flag = false

[jralexander137]

This looks to be in direct contradiction to @adarshk 's reply

[rushikeshvartak]

Please confirm below does roles also exists in saviynt as enterprise roles if yes then make non requestable

[Manu269]

@jralexander137 what if you identify such roles and mark them inactive?

[jralexander137]

The roles need to remain active so they can be assigned as birthright per technical rules.

[Manu269]

Can you try enabling  non requestable/