Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Secondary certifiers are not able to work on Campaigns

sk
Regular Contributor
Regular Contributor
This is especially critical when it comes to self review. If someone is both a primary certifier and holder of an entitlement there is no one to review the access.
 
1.If we launch a campaign notification is only sent to primary not for secondary certifiers.
2.Once the campaign was launched in the home page they were not able to see the count i.e. pending certifications it shows 0 for secondary certifier.
3.We observed this behavior in this quarter that secondary certifiers were not able to see anything when they click on attestations module to do their work.
4. Every one has End User Sav Role because it was mandatory role to get access for Saviynt and for that role we have all privileges for the Attestation module.
5.Even as admin role we can't figure out what was assigned to secondary certifier and what actions were performed by secondary certifier.
 
Let me know if there are any concerns and kindly update the ticket with your observations for my ask.
 
Thanks,
Amit Aware
4 REPLIES 4

DaanishJawed
Saviynt Employee
Saviynt Employee

Hi @sk ,

A secondary certifier can take actions on the certification but they cannot lock the campaign. Only the primary certifier can lock the campaign.

Document Link - https://docs.saviyntcloud.com/bundle/SSM-User-v55x/page/Content/06-mang-cert/cert-mang-cert-main-pag...

Please raise a Freshdesk ticket in order to get this reviewed.

Thanks.

sk
Regular Contributor
Regular Contributor

Hi @DaanishJawed,

Yes, I agree that a secondary certifier can take actions on the certification but they cannot lock the campaign. Only the primary certifier can lock the campaign.

But the issue here is that, we have Primary as well as as Secondary Certifiers to the entitlements. Now when we launch Entitlement Owner campaign for all the certifiers then it should launch for both Primary as well as Secondary certifier. Here Primary certifier is getting notified in his/her Pending Certification section(ARS) but not Secondary certifier. At least secondary cert should get notified and can take action on Primary Certifier's Self Review items.

 

Thanks,

Amit Aware

DaanishJawed
Saviynt Employee
Saviynt Employee

Hi @sk ,

Thanks for mentioning the above.

In case of Primary and Secondary certifier, please note the below points.

  • Only 1 Certification will be launched for Primary Certifier. This is expected behavior. There will be no separate certification launched for the Secondary certifier.
  • Secondary Certifier will only be able to take actions on the pending items with the Primary Certifier. There will be no separate certification launched for Secondary Certifier. If you are seeing that the secondary certifier cannot take actions, then please raise an FD ticket.
  • In order to notify the secondary certifier, a new binding variable, $secondarycertifier, is introduced, in the To field of the email template, to send campaign-related emails to the secondary certifier. This is applicable for the following email templates:
  • Preview

  • Create

  • Reminder

  • Complete

  • Discontinue

  • Consult Complete

  • Expire

sk
Regular Contributor
Regular Contributor

Hi @DaanishJawed ,

Thanks for this valuable information. In our case we are seeing that the secondary certifier cannot take actions, so we raised a ticket.

Regards,

Amit Aware