Adding access request part to service account creation

[Community_User]

Originally posted on April 1 2022 at 12:47 UTC

Hi team,

We'd like to add an option for users to add svc accounts to ad groups. But no matter how many changes we make in the ent type, it doesn't make a difference.

Please let us know if there's any way thats possible,

Thank you,

[Community_User]

Originally posted on April 1 2022 at 14:05 UTC

Hello Seemran,

Could you elaborate what exactly you are trying to do/achieve ?

Regards,

Avinash Chhetri

[Community_User]

Originally posted on April 1 2022 at 16:49 UTC

Hi Avinash,

Attaching two images here (they have no client info/ links in them). The first is part of the service account creation form, where the users should see options to select ad groups.

The second is the change we made in the ent type in the endpoint for it

In the first image we should see the ad groups as options. Would you know how to achieve that? Or should I open a ticket for this?

Pease let us know.

Thank you!

[Community_User]

Originally posted on April 1 2022 at 17:15 UTC

Hi Seemran,

So you are using the "Manage Service Account" to create/update the service account but the entitlements are not getting listed for request, right ?

The same works fine if it is a normal account, is that correct ?

Regards,

Avinash Chhetri

[Community_User]

Originally posted on April 1 2022 at 17:17 UTC

Hello,

Yes, you're correct. Works as expected for requesting user account entitlements, but it's not working for service accounts.

[Community_User]

Originally posted on April 1 2022 at 17:54 UTC

Seemran, 

I dont think there is any specific configuration for it. Which Saviynt version are your experiencing this issue on ?

Regards,

Avinash Chhetri

[Community_User]

Originally posted on April 1 2022 at 17:56 UTC

Hi Avinash,

It's version 2020.0 

[Community_User]

Originally posted on April 1 2022 at 18:33 UTC

Hi Seemran,

I just tried on v2020 and was able to see all the entitlements while requesting for a Service account.

You can check the logs and see what entitlement query gets generated when you select the endpoint that leads to the service account page.

Here's a screenshot from what I tried and it all looks good to me.

Regards,

Avinash Chhetri

[Community_User]

Originally posted on April 4 2022 at 13:29 UTC

Hi Avinash,

While we work on going through the logs, could you let us know what configurational changes you made in the endpoint to achieve this?

Thank you,

Seemran Biswal

[Community_User]

Originally posted on April 4 2022 at 13:44 UTC

Nothing specific, it was already a requstable endpoint in ARS, just had to add the service account workflow to make it requestable as service accounts.

Regards,

Avinash Chhetri