We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Manager's manager can see reportee, but can't disable it

Romain
New Contributor
New Contributor

Hello,

To image a little, let's say we have three users : Alice, Bruce and Charlie
Alice is the manager of Bruce
Bruce is the manager of Charlie

Both of them are having SAV_ROLE_MANAGER, which is as below : 

Romain_0-1657182273209.png

Alice can see Charlie in the tile "Request Access for reportee", but she is getting errors when trying to perform any actions : Access Denied, System error while request. Please request valid User using Wizard

Do you know what could cause this issue and how to solve ?

6 REPLIES 6

Belwyn
Saviynt Employee
Saviynt Employee

Hi Romain, 

Thank you for reaching out to us, 

  To better help you with the issue we need error logs captured while this error is happening. Which version of EIC are you on? Also is this issue happening for only these set of users or can this be replicated to our users as well? 

Thanks & Regards, 
Belwyn.

 

rushikeshvartak
All-Star
All-Star

Open Questions :

  • Does only disable operation is not working?
  • Does manager SAV Role having required access (authorization)

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Romain
New Contributor
New Contributor

Hello,

To reply to both of you :
 - No all operations are not working
 - Yes manager SAV Role having required authorization

I found something in the logs, it seems that only the first reportee is in the Query.
Below is the query that shows reportees after clicking on "Request Access For Reportee"

DEBUG services.ArsRequestAllowedService - nonAdvanceWhomToRequestQry: ( a.manager in (46393,104363,8084) OR a.id in (8084,46393,104363) OR 1=2 )

And here is the one after clicking on one user (same query for every users)

DEBUG services.WorkflowService - fullqry = select a.id from Users a where 1=1 AND ( ( a.manager in (46393,8084) OR a.id in (8084) ) OR a.id in ( 8084 ) OR 1=2 ) AND a.id=71281

We changed reportees, and saw that the query above is always having only two userkeys.

Romain
New Contributor
New Contributor

Here is a sample logs to showcase what I mentionned in the last message.
Seems like an issue in the SQL query.

Romain,

Which version of Saviynt are you on ?

Could you also share more details on the SAV_ROLE_MANAGER ? If on v2020 or v2021 can you also share the details of the Feature Access from the SAV Role ?

 

 

Regards,
Avinash Chhetri

Romain
New Contributor
New Contributor

Hello,

I am on 5.5 SP3.11

Romain_0-1657524484117.png

Romain_1-1657524521485.png