Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Workflow If/Else SavRole or usergroup

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on July 27 2020 at 23:11 UTC

I was looking at the Workflow If/Else Matrix documentation here:


https://saviynt.freshdesk.com/support/solutions/articles/43000556824-workflow-components#WorkflowCom...


and was wondering if it was possible to check if the requester is part of a user group or SAV Role within a request access request. We are looking to have requests from certain groups of users be auto approved and users outside of the groups will need to go through an entitlement owner approval.


Since we already have logic to put users in SAV Roles or User groups we thought it might be easier than using attributes from the user object.


Thanks,


Chris

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
7 REPLIES 7

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on August 3 2020 at 06:59 UTC

Hi Chris,


Try adding a new if-else condition in the workflow with the type as groovy and check the below syntax with SavRole name modification to check if the requester is part of SAV Role within a access request.


requestedby.authorities.collect { it.authority }.contains("ROLE_ENDUSER")



This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on August 24 2020 at 20:03 UTC

Thank you. This works

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on December 17 2020 at 15:21 UTC

The above code works and can be used to check if a user has a SAVRole but is there a way to check if a user is a member of a user group?


Thanks,

Sampo

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on March 4 2021 at 11:53 UTC

Team,


Is there any update of the above query ?

How can we check if a user belongs to a member of a user group in the If-Else block of Workflow?


Thanks,
Abir

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on April 7 2021 at 20:49 UTC

Hello,


Is there any update on this?


I am looking to implement something similar- I want to check whether the user is a member of the user group assigned as the resource owner in the workflow if/else condition.


Thanks,

Alex

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on October 15 2021 at 17:05 UTC

We too are looking for this.  Please provide an update

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on October 26 2021 at 19:10 UTC

David,


I dont think the user group is exposed on the if/else component of the workflow.




Regards,

Avinash Chhetri

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.