Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

SAV role functionality for monitoring

ssingh16
New Contributor III
New Contributor III
Hi Team,

We want a new SAV role for monitoring purposes. We have a SAV role that is a copy of ROLE_ADMIN, and it is read-only access; however, with this role, we are not able to view the connection tab, application logs, or some other modules as well. We required features to only view these module details, not edit. As of now, we are using ROLE_SYSTEMADMIN_DISPLAY, which is a copy of the ROLE_ADMIN sav role.
 
Could you please let us know if there is any way we can create a SAV role to only view these modules and edit them?

Business Purpose: This request is for monitoring purposes to avoid excessive access in the production environment.
 
Note: We are not able to view the connection details when a ROLE_SYSTEMADMIN_DISPLAY sav role is assigned to any user.
 
Regards,
Satyam
20 REPLIES 20

pruthvi_t
Saviynt Employee
Saviynt Employee

Hi @ssingh16 ,

Please add the savrole you want to view connections in the default savrole of each connection and see if the user with that savrole is able to view those connections.

Thanks,


Regards,
Pruthvi

ssingh16
New Contributor III
New Contributor III

Hi Pruthvi,

We have added the ROLE_SYSTEMADMIN_DISPLAY sav role in the connection default option, but we observed that the issue persists and we are not able to view modules (connection details, SOD, and many more).

Note: In the connection default option, Role_Enduser is also associated with ROLE_SYSTEMADMIN_DISPLAY.

Regards,

Satyam

Can you share export of sav role


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi Rushikesh,

PFA sav role extract for ROLE_SYSTEMADMIN_DISPLAY. Let me know if you required anything.

Regards,

Satyam

Add - Admin: Connections Feature


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

ssingh16
New Contributor III
New Contributor III

The Rol_SystemAdmin Display sav role already has this feature added under the feature access tab.

ssingh16
New Contributor III
New Contributor III

Do we have any updates on this? We need to create an FD with the Saviynt vendor if this is a system defect. Would you kindly confirm?

share sav role extract


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

pruthvi_t
Saviynt Employee
Saviynt Employee

@ssingh16 ,

Make sure you've added all the feature accesses and nothing is missing as this is a readonly savrole and a copy of admin savrole. Also perform a clean restart once the features are added and see if the same issue is being faced.

Thanks,


Regards,
Pruthvi

ssingh16
New Contributor III
New Contributor III

Hi Pruthvi,

The suggested feature access has already been added, and we will check it thoroughly. A clean restart means a service restart from the Saviynt UI or from the backend by the Saviynt team.

Regards,

Satyam

pruthvi_t
Saviynt Employee
Saviynt Employee

@ssingh16 ,

You can perform the restart through UI as well but please make sure the restart has successfully completed before performing the testing.

Thanks,


Regards,
Pruthvi

ssingh16
New Contributor III
New Contributor III

Hi Pruthvi,

We have checked, and there are no features missing in both roles that have the same count. We have restarted the server from the UI many times for other issues, but the issue still persists. PFA sheet for feature access for both roles.

PFA document for role export for Role_Admin and Role_SystemAdminDisplay.

Last time when we raised an FD, they closed the ticket by mentioning that this is not a defect and please raise a forum, and if this is a defect, we can proceed with working on it. We need to create an FD with the Saviynt vendor if this is a system defect. Would you kindly confirm?

ssingh16
New Contributor III
New Contributor III

Hi Team,

Can we have an update on the issue reported above?

Regards,

Satyam

ssingh16
New Contributor III
New Contributor III

Hi Team,

Could you please provide an update on the above issue reported?

Last time when we raised an FD, they closed the ticket by mentioning that this is not a defect and please raise a forum, and if this is a defect, we can proceed with working on it. We need to create an FD with the Saviynt vendor if this is a system defect. Would you kindly confirm?

Regards,

Satyam

What happens if you below url 

https://<<domain>>.saviyntcloud.com/ECM/ecmConfig/externalconfig


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi Rushikesh,

Do you want me to check something in the externalconfig.properties under the configuration file? If yes, then could you please be specific with what to check?

Regards,

Satyam

pruthvi_t
Saviynt Employee
Saviynt Employee

@ssingh16 ,

We do not have any known issues with respect to savroles, however the version you're on is 2020.X which is quite old compared to current EIC releases we have.

If you have any plans of upgrade on the books, it is suggested to consider going ahead with it.

Thanks,


Regards,
Pruthvi

ssingh16
New Contributor III
New Contributor III

Hi Pruthvi,

Currently, we do not have plans to upgrade, so in this version, how are we going to tackle this issue? If all feature access is the same as the Role_Admin role in the Role_AdminDisplay, it should work.

Regards,

Satyam

ssingh16
New Contributor III
New Contributor III

Hi,

Could you please provide an update on the above-reported issue? Is this a defect, or after upgrading to the EIC version, might the issue be resolved? If this can be resolved in the current version that we are using (2020.X), then we will open an FD.

Regards,

Satyam

There no backports provided to any version hence you need to upgrade to resolve reported issue


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.