Blocking Enterprise role request

[CSR]

Hi Team,

We have a requirement like below,

If we have an enterprise role with a combination of entitlements where one of the entitlement is for the GitHub application. If the requester has a GitHub Account that is disabled, How can we block a request for an enterprise role?

[sudeshjaiswal]

Hello @CSR,

You can achieve it Via Workflow by checking the status of the account using the below statement in if-else block , Language should be groovy.
(com.saviynt.ecm.identitywarehouse.domain.Users.executeQuery("select u.id from Users u,User_accounts ua, Accounts a where u.id=ua.userkey AND ua.accountkey = a.accountkey AND a.endpointkey = <endpointkey> AND a.status in ('Manually Provisioned','Active','1') AND u.id='${requestedby.id}'").size()!=0)

In this way you can reject the request.


Thanks.

[rushikeshvartak]

how you will find endpoint key ? enterprise role can contains multiple endpoints entitlement

[rushikeshvartak · Accepted solution]

Above query will not work as all tables are not exposed.

As discussed with @prasannta  , This will needs to be idea ticket 

https://ideas.saviynt.com/ideas/EIC-I-5406