SAV role for SaviyntforSaviynt REST connector

[JustSalva]

Hi all,

I created the following SAV role to give a service user permissions to update the users' status using Saviynt rest API (specifically to implement a SaviyntforSaviynt REST connector - POST call to https://<tenant url>/ECM/api/v5/updateUser)

The role works perfectly for me in our pre-production environment but not in production (the two environments have the same product version).

Am I missing something? 

I would rule out a misconfiguration in the production environment connector, just adding the ROLE_ADMIN to the service user everything works.

[Nikitaj]

Hi @JustSalva 

Could you please confirm the error you are getting?

[JustSalva]

Hi @Nikitaj,

this is the error I get both from postman and from saviynt:

"title":"HTTP Status 403 – Forbidden"},"lang":"en","body":{"h1":"HTTP Status 403 – Forbidden"}}},"statusCode":403,"description":null,"status":"Failed"}}

[Nikitaj · Accepted solution]

Hi @JustSalva 

Could you please change the SAV role detail configuration as below and confirm

[rushikeshvartak]

Is Saviynt4Saviynt is connection? Or you are trying to use saviynt REST API using some custom jar / postman

If its connection try adding sav role under connection. 

[JustSalva]

It is a S4S REST connector. 

Thank you, adding the sav role under the connection worked!

It's still unclear to me why in the pre-prod environment this was not required though...