Update user request

[Jaya]

Hi All,

We are allowing managers to use Update user request tile in Saviynt to update user attributes.

But noticed a issue here - managers are able to see themself in the request and are able to update their profile. So please advise how to avoid this.

Though in the SAV Role we have selected below option-

[Manu269]

@Jaya did you check this article : Access Controls (saviyntcloud.com)

[Jaya]

Hi Manish,

Option mentioned in mentioned link are not available in non-EIC version. Below are the available options-

Can we write some advance query so it will dynamically pick manager's reportees.

[sk]

@Jaya : You can use advanced config what options and opt JSON option with below config to control the list of users to show only user direct reportees.

[{"for":"UpdateUserRequest","query":"select a from Users a where a.manager=${users.id}"}]

For details refer this KBA Article 

[Jaya]

Hi @sk @rushikeshvartak 

Have tried this query but still that shows my name in update request.

[{"for":"UpdateUserRequest","query":"select a from Users a where a.manager=${users.id}"}]

And rushikesh, these accesses are already not present.

[rushikeshvartak]

You can restrict and auto reject in workflow if RequestedFor eq RequestedBy in if-else block

[sk]

@Jaya : Okay I missed this part when you use advanced option then it work as below.

Request for self + for the users retrieved from advanced filter

So whatever query I provided will limit the users to direct reportees of logged in user, But Request for Self (is brining the his own ID). 

Only option I can think of is handle it in workflow in such a way that if update user request is submitted for his own id then reject the request.

[rushikeshvartak]

Remove the update user webservice from sav role