Click HERE to see how Saviynt Intelligence is transforming the industry. |
09/29/2022 11:25 AM
Hello guys,
we are a new team on the verge of putting in production our SAVIYNT solution and we've notice that all of our user are having by default the ROLE_SAV_ENDUSER. With that Role, they have to much access to the system, like having access to the Admin but and Job control panel. So we've created our own ROLE_ENDUSER with less access.
So my questions are these, first, how do we remove or replace all of our users ROLE_SAV_ENDUSER with our new one?
Second, how was the ROLE_SAV_ENDUSER was giving in the first place?
In the connection of our authority source with our HR system, i see that we can add our default custom ROLE_ENDUSER, so i think that for joiners and leavers cases, we only have those birthright right now, it will give them our new role, can some confirm?
Thank you guys for the support, looking forward to grow and collaborate more with you guys.
09/29/2022 11:34 AM
Can you check externalconfig.properties for below property
#job.ecm.imp.file.defaultrole=ROLE_ADMIN
To replace all roles you can do using saviynt 4 saviynt connector or from SAV Role -> Users & add /Remove users
10/03/2022 05:02 AM
Hello Rushikesh,
for the first answer, do you want me to check this in the workbench? : #job.ecm.imp.file.defaultrole=ROLE_ADMIN
For this one, i don't want to remove and replace 900 users one by one so i need to create a technical rule or user update rule for this on directly in the connector ?
10/03/2022 07:41 AM
job.ecm.imp.file.defaultrole is exist in externalconfig.properties file located on UI
Admin - Setting - Configuration Files - externalconfig.properties
You can technical rule like below (make sure you have saviynt 4 Saviynt Connector)