Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

No Remove access task is getting generate even after end date reached

srividyaadumall
New Contributor
New Contributor

Hello Team,

We are facing an issue with remove access task that, Remove access task is not getting generate emergency roles even after reaching the end date.

We have extracted the report of all accounts whoch are not having roles, we got total 125k+ records. we checked it and thought that these account-entitmenet mapping came from target. 

But we have seen user itself raised request for emergency roles by giving start and end dates. here even after reaching the end date remove access task is not getting generate for all the entitmenets. but for some of the entitmenets its generating.

 

Could you please help us to understand why this is happening and what would be the reason.

Your suggestions are most appriciated.

 

Thank you,

Srividya

4 REPLIES 4

NM
Honored Contributor II
Honored Contributor II

Hi @srividyaadumall , worth checking enterprise rolemanagment job. Did it fail ?

srividyaadumall
New Contributor
New Contributor

Hello @NM

Its for the emergency role, I have checked no job failed during the time.

srividyaadumall
New Contributor
New Contributor

One more finding from our end that, for the same entitmenet remove access task generated previous. after some days user raised request for the same role, entitlement added fine but no remove access task generated.

rushikeshvartak
All-Star
All-Star
  • Remove Entitlement task for Roles are generated based on assignedfromroles flag on entitlement. 
  • validate assignedfromroles is populated for entitlements -
    • Validate under View existing access - Application - Entitlement section

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.