What if we assign enterprise roles or Entitlements to an active user who has an inactive account?

[alc]

Hello,

when there is a enterprise role assigned to a user or requested by a user. although the user is active and the request is approved. but one entitlement of the role is belong to one of his inactive account. in this case, is that role can be granted in Saviynt? is the entitlement can be assigned to an inactive account?

We do need this kind of behavior happen sometimes. Any idea for such use case?

Thanks,

ALC

[adarshk]

Access cannot be granted to an inactive account from saviynt.

Please follow the below post for details:
https://forums.saviynt.com/t5/identity-governance/add-access-to-inactive-account/m-p/58747

[AravindK]

Hi @alc ,

Through enterprise role request if the request is approved and tasks will not be created as the account itself is inactive . In this case, you can choose Actionable analytics to provision the access for account.  Choose the Allowed action as 'Provision Access' and try .

If this reply answered your question, please Accept As Solution and give Kudos.

[rushikeshvartak]

Issue with enterprise role is we can't check what is status of account before raising request. and required variables are exposed. if account is inactive tasks does not get created

Refer https://ideas.saviynt.com/ideas/EIC-I-5406

https://forums.saviynt.com/t5/application-access-governance/blocking-enterprise-role-request/td-p/67...