Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/22/2024 11:02 PM
Hi All,
We have a scenario, where we are trying to discontinue few Remove access task of AD for a particular time frame. (Due to some issue , we removed remove access json. Now that issue is fixed we want to discontinue task within that timeframe ).
However , a new tasks instance of the same task is getting created every time we taek any action.
We already checked the access end date of the above user accout_entitlement and its updated to Oct -22 -2024
Any suggestion , what else we can check and stop the duplicate instances getting created for these requests
Thanks
Sakshi
04/22/2024 11:06 PM
It seems task have start date and end date. Remove start & end date from request_access table
04/22/2024 11:58 PM
I am trying to update it but Query execution job gives me below error since its require some date time value -
04/23/2024 08:42 PM
Please share query
04/23/2024 09:51 PM
I tried below three the first two failed with error I provided earlier. The third one caused some other issue and request was not even visible on request history page
select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,null AS REQUEST_ACCESS__ENDDATE ,null AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')
select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'' AS REQUEST_ACCESS__ENDDATE ,'' AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')
select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'0000-00-00 00:00:00' AS REQUEST_ACCESS__ENDDATE ,'0000-00-00 00:00:00' AS REQUEST_ACCESS__STARTDATE from request_access where REQUESTKEY in ('44119','44122')
04/23/2024 10:42 PM
select REQUEST_ACCESSKEY as REQUEST_ACCESS__primarykey,'9999-12-31' AS REQUEST_ACCESS__ENDDATE from request_access where REQUEST_ACCESSKEY in ('44119','44122')
Before :
After :
Validation
04/24/2024 12:53 AM
Hi @rushikeshvartak , My assumption was only when we remove end date completely it will stop creating any new task, I tried to put in future date for 22 October-2024. However. in the next job run again it created a new instance of revoke tasks once the current task got errored out.
04/24/2024 05:46 AM
Which job is creating task ? Wsretry / enterprise role management
04/23/2024 12:51 AM
@Sakshi2806 you can refer below sample where we even discontinued few task based on username.
Can you try creating similar like this:
Select taskkey as arstasks__primarykey , 4 as arstasks__status, 'Discontinued as per migration' as ARSTASKS__PROVISIONINGCOMMENTS from arstasks where taskkey in (select art.TASKKEY from arstasks art, users u where art.USERKEY = u.userkey and (u.username like '0030065%' or u.username like 'XXXX%' ) and art.STATUS =1)
04/23/2024 01:00 AM
Thanks Manish, we already tried to discontinue in bulk but in the very next run again new instance was created for the same request .
Check below-