SAV role assignment for user accounts

[Megha]

Hello Team,

We have requirement of assigning SAV admin role to user accounts, please let us know if this is possible. When we try to assign the SAV role we get only the user list not the user accounts.

Example:- User 1 has 5 accounts:- user1.admin, user1.app,user1.sap,user1.db,user1.aws. If i want to assign SAV admin role to user1.app account only is it possible. Only when the user logs in to Saviynt using user1.app account they should be able to perform admin activites. Please let us know your suggestion if this is achievable or not. 

Regards,

Megha Urs B R 

[SumathiSomala]

@Megha SAV role is assigned at user level not at user's account level.

Currently it is not achievable.

Refer the below doc for more information.

SAV Roles (saviyntcloud.com)

If this reply answered your question, please Accept it As Solution to help others who may have a similar problem.

[pmahalle]

Hi @Megha ,

How do you login to Saviynt using account credentials? You need to use actual username and password of the user and Sav role assigned at user level and not account level.

[Megha]

Hello Pandharinath,

We login using user1 credentials.

Regards,

Megha Urs B R

[pmahalle]

Hi @Megha 

So assign ROLE_ADMIN sav role to user1 and login using the same and check once.

[sk]

@Megha : When you say user accounts, Are you managing saviynt users as accounts under saviynt endpoint and wanted to assign ROLE_ADMIN to that? Because SAV Role are assigned to users in Saviynt not accounts. 

Incase if you are managing users as accounts under Saviynt Endpoint and there you want to assign ROLE_ADMIN(which at the end will add users to respective sav role). Please explain your use case properly.

[Megha]

Hello Saathvik,

Currently we login to Saviynt UI using the normal user id :- example( user.t). However we have a requirement that we need to login to Saviynt UI using admin Id:- example(user.t.admin). The SAV admin role to be provided to user.t.admin instead of the user normal id(user.t). Is this something achievable. If not then is there any scope of enahancement planned?

Regards,

Megha Urs B R 

[sk]

@Megha : If user.t.admin is also a user within Saviynt then you can assign if not then it is not possible.

[Manu269]

Hello @Megha ,

SAV role assignment is done at users within Saviynt and not on accounts.

Try exploring this article and see if this helps :

Provisioning or deprovisioning assignments from SAV Role via Analytics (saviyntcloud.com)

[rushikeshvartak]

• User always login with user identity not with account identity
• if same user needs different users identity for different purpose, please create different users and assign them SAV Roles