Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

workflow in progress request

Antoine
Regular Contributor
Regular Contributor

Hello,

our statement is in a creation mode , we  want to create an account only if the account and the entitlement request are accepted together..

To do this, we implement the All Approval workflow mechanism

https://forums.saviynt.com/t5/saviynt-knowledge-base/how-to-configure-all-approval-workflow-to-creat...

Principle of the workflow

The manager must receive the request for creating / update account

The application owner must receive the request for add and remove access. We handle 3 levels of owner rank.

It is works fine to create an account. 

The issue occurs when the end user make a request to update their account and their entitlement in the same request

when the manager rejects  the first step  "Update Account", the  status of the request goes to Completed but the add Entitlement in still in "Review" status.

If I accept the AddEntitlement that is still in review , the WF goes to the application owner whereas  this action is unnecessary because the wf is already completed.

Is it normal ? 

is there an option in a case of UpdateAccount and ModifyAccess to split it into 2  requests . 1 for update account and 1 for ModifyAccess  ?  another solution to not let the request in a review status (autoreject for example) ?

In the past, we tried entitlementOnly bu we faced some issues . It can't suits in our context.

 

Thanks

workflow (2).png

 

 

 

8 REPLIES 8

rushikeshvartak
All-Star
All-Star

Update request =7 modify request means request without dynamic attributes 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Antoine
Regular Contributor
Regular Contributor

Sorry , I didn't get your  point . Do I must test the request type = 7 in the workflow ?

if request does not contains dynamic attribute


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Antoine
Regular Contributor
Regular Contributor

Hello,

 is it possible to correlate the modify account and the add entitlement as it is for the create account ?

Like that, the task add entitlement will not be accessible once the approber accept the request for Update account ?

or to splitt the request that contains Update account and add entitlement to 2 independent requests

You need to split request type


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Antoine
Regular Contributor
Regular Contributor

What does it mean to split request type ?

Antoine
Regular Contributor
Regular Contributor

ok. It works fine now.

Please confirm and mark appropriate solution which can help others 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.