Organization | Endpoint | Roles | Entitlement Tab Significance

[Manu269]

Hello team,

We are exploring the Organization feature within Saviynt  (TPAG).

We have created few organization and onboarded users into same.

While creating the Organization, we have added few Endpoint, Roles and Entitlements as part of it.

Query?

1. What is the significance of above tabs?

2. We tried logging into saviynt by one of the user which is part of organization and raised request, we could see all other endpoints are also available for request?

3. Similarly, since we added only few entitlements from Endpoints in Organization, end user when tried raising the access, he can see all the entitlements for that EP?

Can someone let me know, how this is suppose to behave? Is this expected behaviour or am I missing any configuration?

Please note the users added as part of Organization have basic end user access.

[sudeshjaiswal]

Hello @Manu269,

Can you please check if that user's SAV role has organization selected?

For Ref:- https://forums.saviynt.com/t5/identity-governance/mapping-roles-endpoints-entitlements-to-organizati... 

Thanks.

[Manu269]

@sudeshjaiswal I have added the Organization for following fields in the SAV role.

Show Users in Request Access based on Organizations

Organizations

[Manu269]

Also restarted the server and logged in with Organization user.

The request access for self screen shows all the EP, Role configured in the system.

Anyhow, only subset of EP , Ent and Role are included in Organization.

Am i doing any mistake here?

[rushikeshvartak · Accepted solution]

• Endpoint Tab - is used for Certification of Organization and application owner certification.
• Entitlements Tab - was used previously in case of rule based provisioning and no relation on entitlement visible on ARS Request form.

[Manu269]

@rushikeshvartak 1 last qq...  what would be the best suggestion to enable specific ep and entitlements for users belonging to particular organization?

[rushikeshvartak]

Access Query and use of Entitlements Customproperty

[sudeshjaiswal]

Hello @Manu269,

This is expected behavior.

Thanks,

[Manu269]

How can we control the access request and other components?

I dont see any writeup for same.

[sudeshjaiswal]

Hello @Manu269,

It can be managed in a similar manner how we limit the access  request for other users.

For Ref: https://forums.saviynt.com/t5/saviynt-knowledge-base/request-rules-implementation-usecase-for-app-en... 

Thanks.

Thanks

[Manu269]

@sudeshjaiswal The document says its for :

Also, this document is created for AD based logical endpoint or endpoint-filter based endpoint.

Can we have some more documents to verify this please