How to update SAV role membership in bulk?

[GauravJain]

Hi

As part of user import process, we have added all our users to this SAV role "ROLE_SAV_ENDUSER". But, now we need to remove all those users from this group and add them in a custom SAV role.

How can this be achieved in bulk? any documentation we can follow to implement this?

Regards

Gaurav

[rushikeshvartak]

Use saviynt4saviynt , using multi user bulk upload file you can remove. Or you can use saviynt api

[PremMahadikar · Accepted solution]

Hi @GauravJain ,

The above solution by Rushi is the answer for your question. 

The below is more detailed on the solution.

• Enable Saviynt to Saviynt (connection) - If its not configured, refer this doc - Understanding the Integration between EIC and Saviynt (saviyntcloud.com)
• Consider SAV role as an entitlement
• Go to Request Home --> Request Access for Others - Multi Users -->Actions -->Bulk Upload Request. (Attached sample .xls role upload file)

Note: Set auto approve in Global configurations > Request > Bulk > Auto Approve Workflow for Multiuser request upload - to create the tasks

If this helps your questions, please select Accept As Solution and Hit Kudos

[GauravJain]

Hi @PremMahadikar This looks good but one can not configure auto approval in production environment as it will also auto approve requests raised by end users during that time frame. So, is there any other alternative?

[rushikeshvartak]

You can do during outside business hours or weekend one time activity 

[PremMahadikar]

@GauravJain ,

I don't see any other alternatives.

#Option is only Bulk upload file or Saviynt API and Set auto approve in Global configurations > Request > Bulk > Auto Approve Workflow for Multiuser request upload - to create the tasks

I believe this would be a onetime activity and should be performed before or after business hours.

Note: If auto approval is not configured in Global config, the workflow under the security system will be considered for the approval workflow. If this configuration is setup, then the approval flow will follow the workflow configured for the auto approval. This is only for Multiuser request and bulk user upload.

If this helps your questions, please select Accept As Solution and Hit Kudos

[GauravJain]

Hi - i have tried your suggestion and have following observations. 

1. It seems we cant remove Start Date and End Date columns from excel file. If i just remove them and upload to create access request then Saviynt do not create access requests but it still displays this message on UI "Congratulations!
   Your request has been submitted , Request Details will be sent to {email id}", which is very confusing for end users.
2. Whats the significance of Start and End date in excel as we have not setup SaviyntForSaviynt for time bound access?
3. If i don't remove Start and End Date columns from excel but keep them blank for all the records then Saviynt successfully raise Access (Add/Remove) requests. In this scenario, we can see a Start date (which is current date and time) and a Due date (which is 10 days later) in the respective Tasks generated for Add / Remove Access. So, what does this mean?

Regards

Gaurav

[PremMahadikar]

@GauravJain ,

Below are my answers:

1. It seems we can't remove Start Date and End Date columns from excel file. If I just remove them and upload to create access request, then Saviynt do not create access requests, but it still displays this message on UI "Congratulations!
   Your request has been submitted, Request Details will be sent to {email id}", which is very confusing for end users.
   • Refer this to configure email at global Config and check if any errors in the email attachment file post upload - After uploading bulk upload for New Accounts/ Add ... - Saviynt Forums - 90141
   • But this seems to be like a bug. If you don't find any error, please raise a Freshdesk ticket on this.
2. What's the significance of Start and End date in excel as we have not setup SaviyntForSaviynt for time bound access?
   
   • Its bulk access request upload functionality. These columns are mandatory in csv file. Keep it blank if you don't use.
3. If I don't remove Start and End Date columns from excel but keep them blank for all the records, then Saviynt successfully raise Access (Add/Remove) requests. In this scenario, we can see a Start date (which is current date and time) and a Due date (which is 10 days later) in the respective Tasks generated for Add / Remove Access. So, what does this mean?
   • DUE DATE Displays the date before which a request should be approved. If the due date is elapsed, the request is automatically expired.
   • Please leave it blank. As you mentioned, create date will be automatically set during creation of the request. End date will be blank if it's not passed in csv.
   • DUE DATE can be increased or decreased in Global configuration -> Request -> Request Expiration

If this helps, please consider selecting Accept As Solution on the reply (or replies) that answer your questions. Also hit Kudos!

[GauravJain]

Have a question on this point

"DUE DATE can be increased or decreased in Global configuration -> Request -> Request Expiration"

Neither we have configured 10 days in this setting (rather its blank) nor its the default configuration as per documentation. So, how Saviynt decided 10 days here? 

Regards

Gaurav

[PremMahadikar]

@GauravJain ,

There is nothing in the documentation on this. But it's a default configuration.

Even we see 10 days in request history.

Also to add, this will not affect until the job is run. Below is the job which affects this:

Job Categories for Flat Job Control Panel (saviyntcloud.com)

If this helps, please consider selecting Accept As Solution on the reply (or replies) that answer your questions. Also hit Kudos!