Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Retaining Entitlement for a Role

BT
Regular Contributor
Regular Contributor

Can anyone help with below use case , if a role1 has certain entitlement A,B,C and role 2 has entitlement A,B,X,Y then if user is removed from  role 1  through user update rule we still want to retain entitlement A and B  since these are still required as user is still part of role 2.

logically the best way would be to split the role into 3 , but we already have lot of roles that are assigned to users so would like some suggestion on how this can be achieved without splitting the role,

5 REPLIES 5

rushikeshvartak
All-Star
All-Star
  • This is called as Common Entitlements 
  • If role is assigned from ARS then assignedfromroles flag takes care about this.
  • Does assignedfromroles is populated for Entitlement A & B under View Existing Access ?

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

BT
Regular Contributor
Regular Contributor

yes it is showing in assignedfromroles  

but if role1 come up for removal and role2 come up for adding at the same time due to change of user attribute and there are common entitlements between these role how do we prevent the common entitlement from being removed from user 

  • Does it works from ARS ?

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

BT
Regular Contributor
Regular Contributor

we are granting through technical rules which trigger as birthright or when ever user properties are updated .

What action is called in rule derprovision role ?

Technically it should keep if not working raise support ticket for defect


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.