Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Access query where users can see the 2 endpoints tile if they don't have the access to both

asharma
Regular Contributor II
Regular Contributor II

HI Team,

we need the correct access query for users can see the 2 endpoints tile if they don't have the access to both. If they have access to anyone then endpoints tile should not be visible to that user even if either of the endpoint tile is in process of ARS.

Access query which we are using.

where users.userkey in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey NOT IN ('17','22')))

9 REPLIES 9

PremMahadikar
All-Star
All-Star

Hi @asharma ,

where users.userkey not in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey in ('17','22')))

 

If this helps your question, please consider selecting Accept As Solution and hit Kudos

PremMahadikar
All-Star
All-Star

@asharma ,

I guess, the above query should be applied in both endpoint (17 and 22) access query filter.

 

Manu269
All-Star
All-Star

Put this query in access query filter of both EP

where users.userkey not in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey in ('17','22')))

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

asharma
Regular Contributor II
Regular Contributor II

will this also take care if request is in progress and user will not be able to see any tile for both endpoint?

 

For new request.

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

No it will just take care if user have account you need also consider status

where users.userkey not in (select userkey from user_accounts where accountkey in (select accountkey from accounts where endpointkey in ('17','22') and status in (1)))

if you want to consider inflight request enable block inflight request toggle button on endpoint


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

asharma
Regular Contributor II
Regular Contributor II

Hi Rushikesh,

Will this not allowed any request while any request is in flight.?

Yes using toggle button


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NM
Honored Contributor II
Honored Contributor II

Hi @asharma , WHERE users.userkey NOT IN ( SELECT a.userkey FROM arstasks a WHERE a.ENDPOINT = '' AND a.status = 1 AND a.SOURCE IN ('REQUEST') UNION SELECT ra.userkey FROM ars_requests ars, REQUEST_ACCESS RA WHERE ars.REQUESTKEY = RA.REQUESTKEY AND ars.status = 1 AND ars.ENDPOINTASCSV = '' ) AND ( ${requestee.id} IN ( SELECT userkey FROM user_accounts WHERE accountkey IN (SELECT accountkey FROM accounts WHERE endpointkey = '') ) OR EXISTS ( SELECT 1 FROM ars_requests ars, REQUEST_ACCESS RA WHERE ars.REQUESTKEY = RA.REQUESTKEY AND ars.status = 3 AND ars.ENDPOINTASCSV = '' AND ra.userkey = ${requestee.id} ) )