Assistance Required for User Termination Procedure: Preserving 'End User' SAV Role

[AtrayeeDutta]

Hi Team,

"We have a use case that requires us to remove all of a User's SAV Role when they are terminated. However, the 'End User' SAV role should not be removed. Could you please assist in how to achieve this?"

[Raghu]

For  all Sav roles are you managing any endpoint application

[AtrayeeDutta]

yes

[Raghu]

so Saviynt application have all roles as entitlments right?

when user terminated based on user update rules  it will create remove access task right for that also

[AtrayeeDutta]

yes, can we filter out to remove all sav roles except end user sav role?

[Raghu]

end user sav role is default sav role right, not assigning via request so it should come in request screen also

end user sav role is default sav role right, we can't request via request form am right ?

[AtrayeeDutta]

we have a custom end user sav role, which are assigned when user customproperty35 value is set to "NOTMANAGER"

[Manu269]

@AtrayeeDutta you can try one option is that you can create actionable analytics scheduled to run once or twice as per your need, build the query in such a way that you are able to fetch all the account key and ent key and perform deprovision access as default action.

Sample : Configuring Allowed Actions (saviyntcloud.com)

[rushikeshvartak]

What is business use case to keep ROLE_USER with terminated users ?

In case users get rehired you can re-enable account and add entitlement 

[AtrayeeDutta]

Hi,

Business user case is to keep ENDUSER_SAV_ROLE as birthright, after termination all SAVRoles should be removed except ENDUSER_SAV_ROLE

[rushikeshvartak]

You can go with actionable analytics to add back ENDUSER_SAV_ROLE for terminated users.