Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

SAV Role- Restriction

prachi
Regular Contributor II
Regular Contributor II

Hi,

We have a requirement where we have a group of user say ADMIN_EU which can request few application onboarded in Saviynt. We are planning to create SAV Role to allow the user to request for few application using the SAV_ROLE.

But from that group, there can be few admin (say 1 or 2 member), who should have permission to request for few other applications. This additional permission could either be in the form of request by the users or some configurations done by Saviynt admins.

We are looking for some inputs on how can we allow few users from the SAV_ROLE to have this additional permission to request for few other application as part of that SAV_ROLE.

Any recommendations/inputs here would be helpful.

Thanks,

Prachi

 

3 REPLIES 3

sudeshjaiswal
Saviynt Employee
Saviynt Employee

Hello @prachi ,

Can you create another sav role with additional permissions and assign that to users who need to request more apps.

And the sav role you create for the group should be assigned to the respective users and add an access query in endpoint to show only to that group.

The admins should have both sav roles assigned:

access query - WHERE ${requestor.id} IN (SELECT DISTINCT us.userkey FROM User_savroles us JOIN SavRoles sr ON us.rolekey=sr.rolekey WHERE sr.rolename in ('ROLE_1'))

Thanks

If you find the above response useful, Kindly Mark it as "Accept As Solution".

prachi
Regular Contributor II
Regular Contributor II

Hi @sudeshjaiswal ,

Sometime we observed that the access query is not working, i understand that it takes 30 mins for the microservices job to run but even after 30 mins the access query is not working.

Is there anything else we need to do enable the access query?

Thanks.

You need to wait for Microservice Job to get completed and clear cache


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.