Manager's manager can see reportee, but can't disable it

[Romain]

Hello,

To image a little, let's say we have three users : Alice, Bruce and Charlie
Alice is the manager of Bruce
Bruce is the manager of Charlie

Both of them are having SAV_ROLE_MANAGER, which is as below : 

Alice can see Charlie in the tile "Request Access for reportee", but she is getting errors when trying to perform any actions : Access Denied, System error while request. Please request valid User using Wizard

Do you know what could cause this issue and how to solve ?

[Belwyn]

Hi Romain, 

Thank you for reaching out to us, 

  To better help you with the issue we need error logs captured while this error is happening. Which version of EIC are you on? Also is this issue happening for only these set of users or can this be replicated to our users as well? 

Thanks & Regards, 

Belwyn.

[rushikeshvartak]

Open Questions :

• Does only disable operation is not working?
• Does manager SAV Role having required access (authorization)

[Romain]

Hello,

To reply to both of you :
 - No all operations are not working
 - Yes manager SAV Role having required authorization

I found something in the logs, it seems that only the first reportee is in the Query.
Below is the query that shows reportees after clicking on "Request Access For Reportee"

DEBUG services.ArsRequestAllowedService - nonAdvanceWhomToRequestQry: ( a.manager in (46393,104363,8084) OR a.id in (8084,46393,104363) OR 1=2 )

And here is the one after clicking on one user (same query for every users)

DEBUG services.WorkflowService - fullqry = select a.id from Users a where 1=1 AND ( ( a.manager in (46393,8084) OR a.id in (8084) ) OR a.id in ( 8084 ) OR 1=2 ) AND a.id=71281

We changed reportees, and saw that the query above is always having only two userkeys.

[Romain]

Here is a sample logs to showcase what I mentionned in the last message.
Seems like an issue in the SQL query.

[avinashchhetri]

Romain,

Which version of Saviynt are you on ?

Could you also share more details on the SAV_ROLE_MANAGER ? If on v2020 or v2021 can you also share the details of the Feature Access from the SAV Role ?

[Romain]

Hello,

I am on 5.5 SP3.11