Access Request - Allow applications and endpoints based on user's organization

[ArW]

Hello,

We plan to use organizations to represent different entities: our company and our business partners.
Users will be mapped to those organizations.

Our goal is to limit access requests based on the endpoints and entitlements added to organizations:

For example, the organization corresponding to our company will have all endpoints and entitlements, so our employees should be able to request all applications and entitlements.

However, business partners organizations will only have a few select endpoints and entitlements added so their employees should only be able to see and request apps and access corresponding.

Is it possible to do this ?

[rushikeshvartak]

• Yes you can update access query with help of customer table in endpoints 

[stalluri · Accepted solution]

@ArW 

You can use access query and if the user table has any unique attributes to separate employees and business partners  you can use it.
Or 
You can use organizations and filter in access query
Or
You can use customer table in endpoints.

[ArW]

Thank you for the reply, I have managed to filter endpoints based on an Access Query (at the endpoint level) based on organizations like so

WHERE users.customer IN (SELECT CE.CustomerKey FROM Customer_Endpoint CE, Endpoints E WHERE  CE.Endpoints = E.EndpointKey AND  E.EndpointName = "<EndpointName>")

For entitlements, am I supposed to use the Config for Requestable/Selected Entitlement in ARS in a similar way ?

[rushikeshvartak]

yes for entitlements

[ArW]

I have managed to do the filter on entitlements using this request

ev.id IN (SELECT CEV.entitlement_values FROM Customer_EntitlementValues CEV, Entitlement_values EV, Users U WHERE U.id = ${requestor} AND CEV.customer = U.customer AND CEV.entitlement_values = EV.id)

This needs to be set on entitlement types in "Config for Requestable Entitlement in ARS"
Users will be able to select on entitlement of this entitlement types which are added to the entitlements of the organization they are part of