Click HERE to see how Saviynt Intelligence is transforming the industry. |
06/12/2024 11:10 AM
Hi All,
We have a requirement to get the start and the end date displayed (optional) for all of the entitlements and enforce the MaxEnd Date for some entitlements only (based on risk value for example).
We succeeded to get the first part (displaying the start and the end date for all of the entitlements) by setting "ENDDATEREQUIRED": "0" in Config JSON for Request Dates and enabling "Ask For Start Date End Date While Request".
Our problem is with the second part now,
1- If we add "DEFAULTTIMEFRAMEHRS": "X", "MAXTIMEFRAMEHRS": "X" inConfig JSON for Request Dates, max end date becomes applied for all of the entitlements.
2- If we add "and ev.risk = 3" in Entitlement Filter Query for Request Start/End Date then the start and the end date is displayed for entitlements having risk 3 only (entitlements with risk different than 3 will not get the start and the end date displayed at all).
Is there a way to get the start and end date displayed for all of the entitlements and enforce a max end date for few of them ?
Thanks.
Solved! Go to Solution.
06/12/2024 09:40 PM
07/08/2024 01:14 PM
Hi,
Thanks for you reply !
As MAXTIMEFRAMEHRS is configured at the entitlement type level, is there a way to get a specific entitlement type for the entitlements that we want to enforce the MaxEnd Date for them ?
Thanks.
07/08/2024 07:18 PM
09/01/2024 11:50 PM
will remove access task be created automatically on the revocation date? or do I need to run a job to create the remove access tasks when entitlement is about to expire?
09/02/2024 12:31 AM - edited 09/02/2024 12:35 AM
Hi @yogesh2 , yes remove access task gets created automatically on the end date.
But you have to schedule a job enterpriserolemanagment which will automatically take care of the revoke access.
09/02/2024 06:42 AM
Tasks created on same date but will process in future you can check task future date in startdate column in arstasks table
09/02/2024 10:45 PM
I have enabled the configuration on the entitlement type and I am able to set the end date for each entitlement during request:
But revoke access tasks are not getting created and neither I can see start time and end time on assigned entitlements:
I have also scheduled EnterpriseRoleManagementJob:
Is there some config I'm missing?
09/02/2024 10:47 PM - edited 09/02/2024 10:47 PM
Hi @yogesh2 was these entitlement assigned from saviynt??
Share request screenshot.
09/03/2024 12:18 AM
yes these were requested from Saviynt and assigned by Saviynt as well
09/03/2024 05:54 AM
There are 2 configurations for same.
06/12/2024 10:39 PM
Hi @BGMarouene , currently it is not supported to have different max end date for entitlement.
What you can do is handle it in workflow in the if else condition for a specific entitlement. If dates exceed a particular period reject the access.
07/08/2024 01:05 PM
Is there a way to customise the error message that will be returned to the user in this case ? Just so that he understands that his access request has been rejected coz the end date exceeded the end date we want ?
06/13/2024 12:18 AM
@BGMarouene it wont support filter criteria query condition level , need to raise idea.
08/05/2024 01:46 PM
@BGMarouene Was there ever an idea posted?
08/05/2024 05:05 PM
Yes i have already raised idea around this
https://ideas.saviynt.com/ideas/EIC-I-4633
08/06/2024 09:22 AM
@rushikeshvartak Thank you, voted for it!