Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

How to update SAV role membership in bulk?

GauravJain
Regular Contributor
Regular Contributor

Hi

As part of user import process, we have added all our users to this SAV role "ROLE_SAV_ENDUSER". But, now we need to remove all those users from this group and add them in a custom SAV role.

How can this be achieved in bulk? any documentation we can follow to implement this?

Regards

Gaurav

 

9 REPLIES 9

rushikeshvartak
All-Star
All-Star

Use saviynt4saviynt , using multi user bulk upload file you can remove. Or you can use saviynt api


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

PremMahadikar
Valued Contributor
Valued Contributor

Hi @GauravJain ,

The above solution by Rushi is the answer for your question. 

The below is more detailed on the solution.

PremMahadikar_0-1715932192461.png

Note: Set auto approve in Global configurations > Request > Bulk > Auto Approve Workflow for Multiuser request upload - to create the tasks

 

If this helps your questions, please select Accept As Solution and Hit Kudos

Hi @PremMahadikar This looks good but one can not configure auto approval in production environment as it will also auto approve requests raised by end users during that time frame. So, is there any other alternative?

You can do during outside business hours or weekend one time activity 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

PremMahadikar
Valued Contributor
Valued Contributor

@GauravJain ,

I don't see any other alternatives.

#Option is only Bulk upload file or Saviynt API and Set auto approve in Global configurations > Request > Bulk > Auto Approve Workflow for Multiuser request upload - to create the tasks

I believe this would be a onetime activity and should be performed before or after business hours.

 

Note: If auto approval is not configured in Global config, the workflow under the security system will be considered for the approval workflow. If this configuration is setup, then the approval flow will follow the workflow configured for the auto approval. This is only for Multiuser request and bulk user upload.

PremMahadikar_2-1716283692301.png

If this helps your questions, please select Accept As Solution and Hit Kudos

Hi - i have tried your suggestion and have following observations. 

  1. It seems we cant remove Start Date and End Date columns from excel file. If i just remove them and upload to create access request then Saviynt do not create access requests but it still displays this message on UI "Congratulations!
    Your request has been submitted , Request Details will be sent to {email id}", which is very confusing for end users.
  2. Whats the significance of Start and End date in excel as we have not setup SaviyntForSaviynt for time bound access?
  3. If i don't remove Start and End Date columns from excel but keep them blank for all the records then Saviynt successfully raise Access (Add/Remove) requests. In this scenario, we can see a Start date (which is current date and time) and a Due date (which is 10 days later) in the respective Tasks generated for Add / Remove Access. So, what does this mean?

Regards

Gaurav

 

@GauravJain ,

Below are my answers:

  1. It seems we can't remove Start Date and End Date columns from excel file. If I just remove them and upload to create access request, then Saviynt do not create access requests, but it still displays this message on UI "Congratulations!
    Your request has been submitted, Request Details will be sent to {email id}", which is very confusing for end users.
  2. What's the significance of Start and End date in excel as we have not setup SaviyntForSaviynt for time bound access?
    • Its bulk access request upload functionality. These columns are mandatory in csv file. Keep it blank if you don't use.
  3. If I don't remove Start and End Date columns from excel but keep them blank for all the records, then Saviynt successfully raise Access (Add/Remove) requests. In this scenario, we can see a Start date (which is current date and time) and a Due date (which is 10 days later) in the respective Tasks generated for Add / Remove Access. So, what does this mean?
    • DUE DATE Displays the date before which a request should be approved. If the due date is elapsed, the request is automatically expired.
    • Please leave it blank. As you mentioned, create date will be automatically set during creation of the request. End date will be blank if it's not passed in csv.
    • DUE DATE can be increased or decreased in Global configuration -> Request -> Request Expiration

PremMahadikar_0-1716464878410.png

If this helps, please consider selecting Accept As Solution on the reply (or replies) that answer your questions. Also hit Kudos!

Have a question on this point

"DUE DATE can be increased or decreased in Global configuration -> Request -> Request Expiration"

Neither we have configured 10 days in this setting (rather its blank) nor its the default configuration as per documentation. So, how Saviynt decided 10 days here? 

Regards

Gaurav

 

@GauravJain ,

There is nothing in the documentation on this. But it's a default configuration.

Even we see 10 days in request history.

Also to add, this will not affect until the job is run. Below is the job which affects this:

PremMahadikar_0-1716547911451.png

Job Categories for Flat Job Control Panel (saviyntcloud.com)

 

If this helps, please consider selecting Accept As Solution on the reply (or replies) that answer your questions. Also hit Kudos!