SAV role access limitation

[vyadav]

Hi Team,

I have created a sav role to give the access just to view the account list. Added below feature access

• Admin: Accounts List
• Admin Dashboard

By added this sav role, I can see the admin tab identity repository and account tab but could see any account under this. Do i need to give few more access.

Thank you,

Varsha

[rushikeshvartak]

In order to see account, You need to add sav role in connection attached to security system

https://forums.saviynt.com/t5/identity-governance/read-only-sav-role-for-identity-repository/m-p/622...

[vyadav]

But we don't want to give this access to everyone. It would be for specific people.

[rushikeshvartak]

Person who is part of sav role will be able to see accounts not to everyone. hence you need to add custom sav role in connection

[vyadav]

Thanks for your help ....Can we grant access to view users and entitlement as well for a specific AD.

[rushikeshvartak]

users will be visible all. entitlements also same pattern you need to add sav role in connection and provide entitlements tab access in sav role.

✅👍Please click the 'Accept As Solution' button on the reply (or replies) that best answered your original question.

[vyadav]

Added these access

• Admin: Users
• Admin: Entitlements Administration
• Application Entitlements
• Application Entitlement types

we can see entitlement tab but if I open it is showing access denied and user tab is not visible 

[rushikeshvartak]

Below is valid feature 

Admin: Entitlements Administration

Admin: Users

[vyadav]

Added these but couldn't see the user and entitlement 

[rushikeshvartak]

Screenshot of sav role fearures and user having screenshot

[vyadav]

These accesses have been added.

[rushikeshvartak]

Does sav role added in connection and connection is attached to security system ? Screenshot ?