Click HERE to see how Saviynt Intelligence is transforming the industry. |
01/10/2023 08:27 PM - edited 01/10/2023 09:12 PM
We have created a Role (A) which contains child role B and C and have assigned the role A to a user when the condition City contains "BBSR", it will grant the role A and the child entitlements associated with it.
But when the city name is updated, it removes the Role A, but it does not remove the entitlements of the child role in Accounts,
Is there any way we could work on this.
Thanks in advance.
01/11/2023 03:41 AM
Please clarify - Role A has B and C as entitlements associated within Role A
OR
Role A has a set of entitlements and there are other Child roles B and C which have their own entitlements which aren't getting removed?
I am assuming that you have assigned roles directly via CSV files - which is not the correct practice.
You should ideally use the Request For Multi user Tile and use the bulk upload option to load the roles for the users.
01/11/2023 04:53 AM
Did you use associated entitlement or entitlement map ?
01/11/2023 06:38 AM - edited 01/11/2023 06:41 AM
Thank you @rushikeshvartakrushikeshvartak @KirtiAjrot
I simply associated entitlements B1 and B2 to the Role B and similarly C1 and C2 to the Role C and I do not have any entitlement associated with parent Role.
So the Parent Role A has two child Roles B and C which i added from UI under "Groups" tab of enterprise role.
Roles B and C have entitlements.
In the birthright rule i have assigned Role A with a particular condition. When the condition is true Role A is being assigned to the user and tasks are created to provision entitlement B1, B2 and C1, C2.
But when the condition is false the tasks are not getting created to remove the above entitlements instead it is deleting the Parent Role 'A' only.
01/11/2023 08:26 AM
Child roles won't be removed as those are not directly assigned to account.
02/01/2023 06:51 AM
@rushikeshvartak When I remove the parent role .. it does remove the parent role and the task is generated to remove the entitlements associated with child roles .. but the tasks are failing with error like below:
"entitlement 46505 is assigned via another role 10 not present in delete request, hence cannot be removed"
This is happening because the child role is mentioned in "ASSIGNEDFROMROLES" column under table "account_entitlements1" for the entitlements assigned by child role.
How can I go around with this. This is completely defying the usability of parent-child role usability. Ideally if child role is not assigned directly .. everything associated with child role should be linked with assignment of parent role.
Is this a bug?
02/01/2023 08:02 PM
This functionality changed over each release if its not working as expected raise bug. we also noticed that this changed after every release.
sometime child role entitlement having parent rolekey some release not etc