Transfer Access when user gets users gets disabled

[Aashish-Handa]

Hi Team,

We have come across a use case where the customer wants to configure a functionality in Saviynt as to if in case a user is terminated, then all its access should be transferred to the user's manager for that particular endpoint.

We thought of coming up with an actionable analytics that runs and provisions access for that user. Now, the question here arises how would the analytics pick the task for the disabled user. Would request some assistance to configure this functionality if possible.

Also, in case there is a better and more efficient way to achieve this, please let us know.

Thanks

[rushikeshvartak]

All access can you elaborate ?

• Do you mean by ownership ?
• Do you mean by existing application access?

[Aashish-Handa]

Let a user has application access for entitlements A,B,C for endpoint X.

So the transfer means provisioning A,B,C for the user's manager when the user gets terminated.

Thanks

[rushikeshvartak]

This is not supported and valid use case. consider Manager does not have account in app1 then we can't create account for manager and provide access to A B C

[Aashish-Handa]

A user manager having that endpoints account is a must from the target app, hence, creating its account is not needed in this use case.

Hence, a valid use case. Please advise a solution.

Thanks

[Aashish-Handa]

Hello Team,

Any suggestions on this?

Thanks

[rushikeshvartak]

Create actionable analytics and create provision access to additional access which user has but manager does not

[Aashish-Handa]

Thanks, that was what I was thinking as well. However, I wonder how would be the analytics triggered to provision the accesses to the manager once the user is disabled?

What tables should I hit?

Thanks

[rushikeshvartak]

You need to use one of the user's property to find such cases