Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.
This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Restrict Birthright AD Groups from removing in ARS

AshishDas
Regular Contributor II
Regular Contributor II

‎03/31/2023 12:27 AM

Hi,

We have few AD groups that has been assigned as birthright to AD Users. Can we restrict the user from modifying or removing access to these birthright groups from the ARS request access page?

AshishDas_0-1680247525585.png

We would want the modify and delete icon to disappear for the birthright AD groups. Or not showing the birthright AD groups at all, the user has access to in the ARS page while he/she is requesting new access

0 Kudos
1 REPLY 1

prasannta
Saviynt Employee
Saviynt Employee

‎03/31/2023 03:08 AM

Right now, it is not possible to restrict users from modifying birthright access from the ARS page. You can alternatively use the configuration "Config for Requestable Entitlement in ARS" in the entitlement type configurations, to exclude certain entitlements. Please refer below documentation on how to use this configuration.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Under...

Additionally, this has already been posted on ideas portal as an enhancement, you can vote for this feature here.

https://ideas.saviynt.com/ideas/EIC-I-4314

 

Copyright © 2024 Khoros, LLC