Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Roles are not getting removed for Unlinked accounts

saimeghana
Regular Contributor
Regular Contributor

Hi Team,

We observed that when we unlinked/removed the Account from Target in saviynt we can see the roles are not getting removed from user profile.

We tried to remove manually in saviynt still it's not removed.

Please help us to resolve this issue ASAP

Thanks,

Sai Meghana

12 REPLIES 12

dgandhi
All-Star
All-Star

Can you elaborate more on the request? It is not quite clear.

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

saimeghana
Regular Contributor
Regular Contributor

Hi @dgandhi,

we are unlinking the account from user and creating the new account with new name.

The old account related roles are still visible in user profile

Can we able to remove those roles manually in saviynt?

Thanks,

Sai meghana

Yes you can remove the users from the role.

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

saimeghana
Regular Contributor
Regular Contributor

We tried to remove the role but it not created any task and not removed also because the role related entitlement is no longer in user profile.

Thanks, 

Sai meghana

Is Role Modification WF set to Auto Approve?

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

saimeghana
Regular Contributor
Regular Contributor

Yes, we don't have workflows.

Thanks,

Sai Meghana

rushikeshvartak
All-Star
All-Star

Can you share output of below query and confirm accountkey is of old account

select * from role_user_account where userkey=1223 and rolekey=1


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi @rushikeshvartak,

The output of the above query: we are getting old account's accountkey.

Thanks,

Sai Meghana

rushikeshvartak
All-Star
All-Star

You can create actionable report with remove role action to remove role.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

To run the actionable report also the entitlement is not present in the user level.

Is this possible without entitlement is role will remove?

Thanks,

Sai Meghana

Hi Team,

Issue is that we are removing the AD account [Account1] from the user manually and then creating a new Account [Account2]. So Roles which are attached to the entitlements for Account1 are still visible on User Profile and if we try to remove the roles manually, saviynt do nothing. Prob is the mapping we have in role_user_account table have Role, user and Account1 mapping which is no longer mapped to the user. Is there any way we can remove this role?

we also have same issue & found  audit concern , Currently if no entitlements associated we can't remove role. Thats product issue.

https://ideas.saviynt.com/ideas/EIC-I-2392

https://ideas.saviynt.com/ideas/EIC-I-2421


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.