Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Unable to erase user using PII Erasure Policy

swagat
New Contributor II
New Contributor II

Hello,

We have implemented below steps to erase user identity in saviynt using PII Erasure Policy but we are getting no success :

1. We have created a new analytics sql query :
SELECT userKey, PIIERASURESTATUS, 'personallyIdentifiableInformationErasure' as Default_Action_For_Analytics FROM users WHERE username='Username';

We selected category as "Compliance" and Allowed Action as "Personally Identifiable Information Erasure"

2. We have created "RunAllAnalyticsJob" and enabled Advance Option with control name "and analyticsname='PII Erasure in EIC for particular user'" and enabled "Execute Default Action for Analytics" check box.

We are getting user record from analytics query but we are not able to erase the user identity after running job. Can you please provide us with detailed steps on how to erase the user from EIC.

Screenshot 2024-06-11 171858.png

We have followed below document :
https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter07-General-Administrator/Tes...

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter07-General-Administrator/Set...

5 REPLIES 5

Debanjana
New Contributor
New Contributor

Hi , any update on this ? 

adarshk
Saviynt Employee
Saviynt Employee

Can you please share the logline on when the job is executed. make sure sensitive information is masked.  Also, what is the status of user after job execution?

swagat
New Contributor II
New Contributor II

Hi Adarsh,

Status of user is inactive as we are trying to delete an inactive user. We have enabled "Retain PII Pertaining to a User's history by archiving it as files" in Global Configuration.

Also find the below logs:

2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-proccedJobExecution :: true
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Check Whether History data is valid for Smart Action: !!
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Default Action Name: personallyidentifiableinformationerasure
 
2024-06-13T16:29:11+05:30-ecm-worker-services.SaviyntElasticService-Thread-1505-DEBUG-Bulk delete is done for 1 data
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-Thread-1505-DEBUG-Exit deleteAnalyticsHistoryOnly
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Method to invoke = personallyIdentifiableInformationErasure
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method found - name=personallyIdentifiableInformationErasure
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method parameters type = java.util.Map
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method personallyIdentifiableInformationErasure found in analyticsHistoryService...
 
2024-06-13T16:29:11+05:30-ecm-worker-log.ClientIpExtractorService-quartzScheduler_Worker-16-DEBUG-System cannot retrieve client IP from thread local because it is not a Web Request
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Unable to process : PII Erasure action through Analytics Job can be performed only on SATURDAY,SUNDAY.
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-proccedJobExecution :: true
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Check Whether History data is valid for Smart Action: !!
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Default Action Name: personallyidentifiableinformationerasure
 
2024-06-13T16:29:11+05:30-ecm-worker-services.SaviyntElasticService-Thread-1505-DEBUG-Bulk delete is done for 1 data
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-Thread-1505-DEBUG-Exit deleteAnalyticsHistoryOnly
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Method to invoke = personallyIdentifiableInformationErasure
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method found - name=personallyIdentifiableInformationErasure
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method parameters type = java.util.Map
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-method personallyIdentifiableInformationErasure found in analyticsHistoryService...
 
2024-06-13T16:29:11+05:30-ecm-worker-log.ClientIpExtractorService-quartzScheduler_Worker-16-DEBUG-System cannot retrieve client IP from thread local because it is not a Web Request
 
2024-06-13T16:29:11+05:30-ecm-worker-analytics.AnalyticsESService-quartzScheduler_Worker-16-DEBUG-Unable to process : PII Erasure action through Analytics Job can be performed only on SATURDAY,SUNDAY.

Debanjana
New Contributor
New Contributor

Hi Adarsh, 

Any update on this?

 

Hi @Debanjana 

As per the logs you have shared above, it is unable to process because of the below error line.

PII Erasure action through Analytics Job can be performed only on SATURDAY,SUNDAY

Could you please try doing it on the above mentioned days and see if it works.