Did you know? How and where can you leverage the strength of SSM’s dynamic attributes?

[Community_User]

Originally posted on October 9 2020 at 18:29 UTC

1. What are the different types of dynamic attributes supported in SSM?

Account Level Dynamic Attributes: Number, String, Boolean, Enum, Large Text, Checkbox, Date, Password,Single Select from SQL query, Multi Select from List, Multi Select from SQL Query

User level Dynamic Attributes: Number, String, Boolean, Enum, Large Text, Checkbox, Date, Password,Single Select from SQL query, Multi Select from List, Multi Select from SQL Query, Encrypted

2. How to access dynamic attributes in workflow?

Dynamic Attributes can be added in If Else block in a workflow to route approval based on dynamic attribute value

You need to select "groovy" in the "Expression language" dropdown, for having groovy / Java methods available.

Samples:

1. dynamicAttributes.get('Country') eq ‘USA’

Above sample can be used to route approval based on beneficiary user’s country

2. (Date.parse('MM-dd-yyyy',dynamicAttributes.get('accountExpires')) < new Date().plus(366))

Above sample can be used to route modify account approval by checking for a dynamic attribute named accountExpires that is mapped to accounts column "validthrough". If the account expires in less than a year then request will be routed to an assignee versus account expires in more than a year, then request will be routed to another assignee

3. How to access hidden dynamic attributes in workflow?

Hide on create/update dynamic attributes default value is exposed in workflow only when config “Expose hidden attributes in workflow” is ON

4. How to access dynamic attributes in connector for provisioning use cases?

Sample: ${requestAccessAttributes?.location} – Location is the name of the dynamic attribute in request which can be passed in connector jsons

5. How can you print dynamic attribute list in request emails?

Yes

Sample:

${dynamicAttrsList.collect{it.attributeName.toString() + ': ' + it.attributeValue }.unique().join(', ')}

This will print the attributes like below:

Attrname1: Attrvalue1, Attrname2: Attrvalue2

6. How do you change the values of a dynamic attribute based on another?

You can configure a parent and child attribute like below

In below sample, based on Country selection, Language attribute value selection will load. Based on Franchise selection, Player attributes will load

7. How do you filter entitlements for selection and in selected list in application request form based on dynamic attributes?

You can add filter query in below config in EntitlementType show page

Sample: ev.customproperty1='$(<dynamicAttribute1>)'

8. Can you filter roles based on dynamic attributes in application request forms?

Roles can be filtered by configuring “Requested Query” and “Selected Query” under Endpoints show>Role Type

Sample: role.status=1 and role.customproperty1 = '${dynamicattributevalue1}'

9. Can you use dynamic attributes to arrive at an account name for service accounts?

Yes, this is supported for service account request. Below config in Endpoint show page needs to be configured

Sample: USA-${attribute1}${attribute2}###INCREMENTINDEX###${attribute3}

10. Can you use hyperlink on dynamic attribute labels?

Dynamic attribute label with hyperlink can be configured as below

Label = 'Click to Visit <a href="https://www.saviynt.com">Need a Demo</a>'

[Community_User]

Originally posted on September 9 2021 at 23:29 UTC

Please note that below config need to be added in Config.groovy for point 10

excludeActionList = [ "ECMEMAILTEMPLATE_UPDATE", "ECMEMAILTEMPLATE_SAVE", "ENDPOINTS_ADDATTRIBUTE" ]

ECMEMAILTEMPLATE related configs can be excluded.