How is user adhoc suspension managed in Saviynt.
My scenario is:
1. Manager should be able to put user in "Suspended" state, which is different user from "Disabled" user. This should be a feature to disable a user like through ARS. This should "suspend" user's account and related entitlements.
2. If now the user is "unsuspended", manager should be able to request this un-suspension from ARS and then all the suspended accounts and entitlements should be enabled at the same point where they were suspended.
Solved! Go to Solution.
You can use one click disable for ad hoc suspension but you said disable is not required. once accounts is suspended Saviynt will not know what old access account was having.
In this case user account should be inactivated & reactivated for unsuspension
Actually I can use one click disable, but only if I am able to identify that "disable" as suspension somehow. Need to differentiate between normal disable and "suspension disable".
Also, one click disable is anyways making User status as "Inactive", can I add more statuses in "Status" dropdown? Also somehow need to make the account "Inactive", as you suggested, if it is "suspension disable".
You cannot add more user status to what's already there. Saviynt reognizes only two status's Active and Inactive.
What you caould perhaps do is, make use of customproperties to add your 'additional' status and then trigger user updates rules to disable accounts/access.
Thanks @avinashchhetri, makes sense.
Do you think I can achieve this as well?
On suspension if I make user's account inactive, say AD account which has 3 entitlements (2 active and 1 disabled), now when user is unsuspended, AD account should be enabled to same state with 3 entitlements (2 active and 1 disabled)? Like freeze and unfreeze....
You can achieve using below steps
For Reactivate -