Saviynt Forums

Sampo · 03/22/2024

We're managing Entra ID group memberships from an IGA solution (Saviynt). With non-mail enabled groups we can do it with Graph API. With mail-enabled groups that are synced from on-prem AD we can use PowerShell to manage the memberships. But customer...

Sampo · 03/15/2024

Hi,we have a securirtysystem with Create Task Action as EntitlementsOnly. Some users receive the account as a birthright through technical rules but others can also request an account from ARS. The security system uses the REST connector for provisio...

Sampo · 01/23/2024

We ran into a new issue last weekend:We're maintaining some AD child endpoint entitlement custom properties manually in Saviynt for controlling how the entitlement behaves in approval workflows and also for setting display name for the entitlement in...

Sampo · 01/07/2024

Hi,AD access import jobs seem to occasionally delete account-entitlements from Saviynt database even if the group memberships are not deleted from AD. We noticed the issue when running incremental AD access import jobs every 30 minutes during the day...

Sampo · 01/07/2024

Hi,I've noticed that after upgrading to releases v23.9 and v23.10 from either 5.5 or v23.5 our Sav4Sav user import jobs have started to behave differently. If a user import job uses a query that updates the same user more than one time, then this wil...

Sampo · 02/07/2024

It looks like the incremental AD access import deleted access-entitlements for groups whose memberships had been modified (for example by provisioning access for a user). I added the following config to 'Active Directory' connection groupImportMappin...

Sampo · 01/31/2024

We've found out that while you can't request access for an inactive account, the following scenarios can happen (at least with v24.1):- technical rules give access to an inactive AD account. Provisioning access seems to work, but in case AD account h...

Sampo · 01/23/2024

The incremental AD access import job is currently not scheduled, but account-entitlements are deleted also when it's run manually just once per a day, so I think the issue is not related to the schedule of the job.

Sampo · 01/09/2024

Thanks Dhruv Sharma, this is good to know!

Sampo · 12/06/2023

Thanks a lot @rushikeshvartak , I was able to run the query with analytics. Yes, we are now setting the owners to parent entitlements, though it's still unclear why setting rank 1 owners to child entitlements was working in previous releases (up to 2...

Online Status	Offline
Date Last Visited	‎03/22/2024 11:43 AM

Saviynt Forums

User Statistics

User Activity

Can Saviynt Add/Remove Accounts to cloud-only mail-enabled groups?

Can account be provisioned to target system with technical rules when EntitlementsOnly is used?

Entitlement custom property values were lost

AD access import job occasionally deletes account-entitlements

User import jobs wiping out user attributes when the same user is updated more than one time

Re: AD access import job occasionally deletes account-entitlements

Re: Add Access to Inactive Account

Re: AD access import job occasionally deletes account-entitlements

Re: User import jobs wiping out user attributes when the same user is updated more than one time

Re: How to read entitlement history data?