Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Avoid approving request when requestor is part of the assignees

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 27 2020 at 11:37 UTC

When creating a workflow that would have approval inside, I found out there is a way to tell "If the requestor is the / one of the approver(s), the request is automatically accepted.

For example, if we use the Manager Approval, we can put before the below script in a If / Else Condition box to accept the request if manager is doing the request :

requestedby.username!=user.owner


However, I was wondering if we can insert in If / Else Condition box a SQL Query, as the assignees would be based on Custom Assignement.


Thanks for advising.


SSM Version : 5.4.0.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
4 REPLIES 4

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 27 2020 at 14:04 UTC

There is a Custom Assignment block in v5.4 that accepts SQL queries.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 27 2020 at 14:09 UTC

Hi Avinash,


Yes, this is what we are using for assigning the approval to a specific SAV Role :

image


My question is, as this is custom assignement, the following :

Is there any way to tell "if the requestor is part of the results of this custom assignment, therefore the system automatically approves the request" ?


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 27 2020 at 14:21 UTC

I believe the default behavior is that if the requestor also happens to be the approver, then the approval goes to the Admin.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 27 2020 at 14:30 UTC

I have tested in a 5.4.1 that when requestor is the approver, it actually goes to a complete request. Need to check this on 5.4.0 again and confirm.

We can mark this as answered.

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.