SAV role functionality for monitoring

[ssingh16]

Hi Team,

We want a new SAV role for monitoring purposes. We have a SAV role that is a copy of ROLE_ADMIN, and it is read-only access; however, with this role, we are not able to view the connection tab, application logs, or some other modules as well. We required features to only view these module details, not edit. As of now, we are using ROLE_SYSTEMADMIN_DISPLAY, which is a copy of the ROLE_ADMIN sav role.

Could you please let us know if there is any way we can create a SAV role to only view these modules and edit them?

Business Purpose: This request is for monitoring purposes to avoid excessive access in the production environment.

Note: We are not able to view the connection details when a ROLE_SYSTEMADMIN_DISPLAY sav role is assigned to any user.

Regards,

Satyam

[pruthvi_t]

Hi @ssingh16 ,

Please add the savrole you want to view connections in the default savrole of each connection and see if the user with that savrole is able to view those connections.

Thanks,

[ssingh16]

Hi Pruthvi,

We have added the ROLE_SYSTEMADMIN_DISPLAY sav role in the connection default option, but we observed that the issue persists and we are not able to view modules (connection details, SOD, and many more).

Note: In the connection default option, Role_Enduser is also associated with ROLE_SYSTEMADMIN_DISPLAY.

Regards,

Satyam

[rushikeshvartak]

Can you share export of sav role

[ssingh16]

Hi Rushikesh,

PFA sav role extract for ROLE_SYSTEMADMIN_DISPLAY. Let me know if you required anything.

Regards,

Satyam

[rushikeshvartak]

Add - Admin: Connections Feature

[ssingh16]

The Rol_SystemAdmin Display sav role already has this feature added under the feature access tab.

[ssingh16]

Do we have any updates on this? We need to create an FD with the Saviynt vendor if this is a system defect. Would you kindly confirm?

[pruthvi_t]

@ssingh16 ,

Make sure you've added all the feature accesses and nothing is missing as this is a readonly savrole and a copy of admin savrole. Also perform a clean restart once the features are added and see if the same issue is being faced.

Thanks,

[ssingh16]

Hi Pruthvi,

The suggested feature access has already been added, and we will check it thoroughly. A clean restart means a service restart from the Saviynt UI or from the backend by the Saviynt team.

Regards,

Satyam

[pruthvi_t]

@ssingh16 ,

You can perform the restart through UI as well but please make sure the restart has successfully completed before performing the testing.

Thanks,