Managing Request For Lock/Unlock/Enable/Disable

[vishalagrawal1]

We are currently at 5.5 SP3 `but can't see Disable/Enable option in ARS . We need this functionality to manually disable/Enable account as per request.

We followed below saviynt articles but didn't help.

https://saviynt.freshdesk.com/support/solutions/articles/43000600562-requesting-to-lock-unlock-enabl...

[Srinivas]

Hello @vishalagrawal1 

If you are looking for Enable and Disable Identities on an Adhoc basis,  you can look at the Update User Option by using the Tile Update User Request ( Enable Tile using the savrole).  Using this,  on update of an user attribute  you can Disable/Enable the Access based on the User Update Rules. You can control the dynamic user attributes to be shown in User Update Request Tile under the Register User tab in Global Configurations of Admin Menu Section.

hope this helps

Thanks & Regards

Srinivas

[Srinivas]

Hi @vishalagrawal1 

Also in SSM there is an option "One click disable" for Disabling the identities.

Regards

Srinivas

[vishalagrawal1]

Hi @Srinivas  I am not looking for triggering enable/disable based on user update rule because we just want to enable/Disable only  a particular account on request basis.

As per link shared in above discussion, Saviynt has Enable/Disable functionality on ARS tab where we can raise request for Enable/Disable of any account but we don't see this functionality in our Saviynt.

As per doc, this functionality should be available in our Saviynt version 5.5 SP3.

Thanks

Vishal

[rushikeshvartak]

You need to have additional column (statusconfig) in endpoints table. Please raise freshdesk ticket to add same in database table

[vishalagrawal1]

Hi Rushikesh,

it's already there in endpoint configuration but still can't see in ARS.

Thanks

Vishal Agrawal

[rushikeshvartak]

Does your account have lockedStatus column populated ? 

if its locked then you will see enable else disable

[vishalagrawal1]

Hi Rushikesh,

I am not not sure about locked status Coolum but i believe to trigger any Enable task, account status should be inactive and vice versa for disable, acc status should be Active.

Thanks

Vishal

[rushikeshvartak]

Along with that you need to have lockedstatus column populated in accounts . You can update for one account and test

[vishalagrawal1]

thanks, What should be it's value, true/false? We can't update lockedstate for account manually, is it something we should reconcile?

Regards

Vishal

[vishalagrawal1]

Along with this We can see lock option in ARS after updating "State & Status config under endpoint level even we didn't locked state at account level

"

[rushikeshvartak]

This needs to be imported from target value should 1/0

for testing run sql query and test

update account set lockedstatus=1 where accountkey=11111 limit 1;

[vishalagrawal1]

Hi Rushikesh,

I tried with suggested changes.
1) Change lockedstatus=1
2) Checked with accountstatus=2 or accountstatus=1
but still can't see enable/Disable in ARS

Please guide us on this.

[rushikeshvartak]

Account status should be active. and locked status should locked then enable button will be visible

[vishalagrawal1]

Tried with acc status -- active. and locked status should lock but still can't see enable option

ARS Tab Screenshot

[rushikeshvartak]

i can see unlock account it will show either enable/unlock or lock/disable

[vishalagrawal1]

I just added Enable/ Disable only but still can't see this option in ARS.

[rushikeshvartak]

• Endpoint Config
• Account Locked status should be Locked/Unlocked
• Account status should be active

[vishalagrawal1]

All the changes as per requested only but still not getting this

[rushikeshvartak]

ARS Screenshot ?

Account is orphan?

[vishalagrawal1]

Account is not orphan

[rushikeshvartak]

Check if its visible for another endpoint or service account. it might be possible functionality is missing in your service pack