Click HERE to see how Saviynt Intelligence is transforming the industry. |
12/19/2023 05:25 AM
We will do self-certification.
Therefore, we would like to do the following two things.
1. If the user manager displayed in Step-1 is different (No, this is not my manager), select a new manager.
2. Perform an access review after selecting new manager.
The action setting for certification is as follows.
When we do self-certification with this setting, we can select a new Manager as follows:
When we click Submit, we can see pending items of the certification.
Then click close and click next to move to Step-2.
However, no data is displayed there.
If we select "Yes, this is my Manager" in step-1, access is given as follows:
How can I select "No, this is not my manager" and do an access review after selecting a new manager?
Solved! Go to Solution.
12/19/2023 09:07 AM - edited 12/19/2023 09:08 AM
@JPMac : Do you have DISABLEREMOVEACCOUNT enabled on respective endpoints(Azure AD, R-AD)? if so then you are hitting a know bug. Which is fixed in v23.9 but as per document it is only fixed in User Manager, Service Account and Application Owner.
Workaround would be before launching campaign try to disable above mentioned configuration on respective endpoints and once campaign is launched enable it back
Enhanced Configuration Handling
The User Manager, Service Account, and Application Owner campaign modules now allow users to lock certifications, regardless of whether the DISABLEREMOVEACCOUNT configuration at the endpoint level is enabled or disabled. For more information, see Creating, Launching, and Scheduling Campaigns.
12/19/2023 09:07 AM
Since manager is updated you need to relaunch the certification with new manager
12/19/2023 08:58 PM
What I want to do is the certifier selects "No, this is not my manager" and then the certifier itself does an access review.
Instead of relaunch it to new manager.
Can't you do that?
12/19/2023 09:29 PM
No