SAV Role permission to create user with-in a specific organization

[Kramerica]

We are looking to do an API based integration with an upstream system (e.g. ServiceNow) to register Contingent Workforce in Saviynt. However, we want to provide them privilege to create these contingent workers under a specific organization (Contingent) only. 

I am able to define a Sav Role with all the privileges but not able to restrict create user operation under that specific organization. Has anyone done that or achieved that before?

SAV Role details are attached

[rushikeshvartak]

• You can't achieve specific organization logic in SAV Role or restrict in API.
• Follow below workaround
  • If requestor = API User & Requested for other Organization user then Reject the request in workflow else follow workflow/ Auto Approve.