We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Revoke Task for Attestation/ Campaigns

William3squivel
New Contributor III
New Contributor III

Hello, I am having a difficult time understanding each option provided for the revoke task when building a certification campaign. Can someone please provide more clarity on the options. for example, the create revoke task for term user on Expiring is that a task where if a user marks a user to be revoked but does not complete their certification and lock it, it will undergo revocation during expiration? or is it where the campaign comes to a close and all campaigns that have been certified and locked will now have a revocation task created.

Revocation task for Sav.PNG

2 REPLIES 2

pruthvi_t
Saviynt Employee
Saviynt Employee

Hi @William3squivel ,

Greetings.

Please refer to the below documentation as it explains all the configurations while creating various types of campaigns.

Screenshot 2023-04-26 at 10.22.12 AM.png

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter06-Configuring-SSM/Configuri...

Thanks,


Regards,
Pruthvi

dgandhi
All-Star
All-Star

Revoke Tasks

https://docs.saviyntcloud.com/bundle/EIC-Admin-v2021x/page/Content/Chapter06-EIC-Configurations/Conf...

Above link and below should provide good understanding on the config part (regarding revoke task)

The following table provides the list of settings to enable or disable creation of revoke tasks for different scenarios in the campaign.

Setting Description

Create Revoke Tasks for Revoked/Conditionally Certified Acc. & Ent on Locking

Use this setting to enable the certifier to create revoke tasks for terminated, rejected, or conditionally certified items accounts and entitlements on campaign lock.

  • ON: Enables the certifier to create revoke tasks on campaign lock.

    Note

    Once the campaign is locked, if the user is terminated then account revocation tasks required to manually suspend the account are created in Applications > Home > Tasks > Pending Tasks.

  • OFF: Disables the certifier from creating revoke tasks on campaign lock. It retains the status of the user as active, and no revoke tasks are created for accounts, entitlements, and roles associated with the user.

Create Revoke Tasks for Revoked/Conditionally Certified Acc & Ent on Expiring

Use this setting to enable the certifier to terminate the user during employee verification and expire the campaign.

  • ON: Enables the certifier to create revoke tasks upon campaign expiration.
    Note

    Once the campaign expires, if the user is terminated then account revocation tasks required to manually suspend the account are created in Applications > Home > Tasks > Pending Tasks.

  • OFF: Disables the certifier from creating revoke tasks upon campaign expiration. It retains the status of the user as active, and no revoke tasks are created for accounts, entitlements, and roles associated with the user.

Create Revoke Tasks for UnResponded Items on Expiry

Use this setting to create revoke tasks for unresponded items such as users, accounts, entitlements once the campaign expires.

  • ON: Enables the certifier to create revoke tasks for unresponded items upon campaign expiration.
  • OFF: Disables the certifier from creating revoke tasks for unresponded items upon campaign expiration.

Create Revoke Tasks for Certified Items on Expiry

Use this setting to create revoke tasks for certified items once the campaign expires.

  • ON: Enables the certifier to create revoke tasks for certified items upon campaign expiration.
  • OFF: Disables the certifier from creating revoke tasks for certified items upon campaign expiration.

Thanks

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.