Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Access Request Approval should approve only once if manager and entitlement owner is same

SeemaDas
New Contributor III
New Contributor III

Hello,

        When a requestee is requesting access for user whose manager is also the entitlement owner, then single approval should approve both levels. Right now, two approval tasks getting generated one for manager and other for entitlement owner, instead upon manager approval, it should auto-approve entitlement owner level task if manager and entitlement owner is same.

Is there any way to achieve this?

Thanks.

5 REPLIES 5

Dhruv_S
Saviynt Employee
Saviynt Employee

An if-else block can be used in this case before the 2nd level approval with condition manager equals the entitlement owner in the condition.  You can test with the below query. Please confirm if it works.

"condition:endpoints.requestowner eq user.manager"

SeemaDas
New Contributor III
New Contributor III

Thanks for the suggestion. I tried following condition and it is working

"condition:entitlement.allowner.contains(user.owner)"

Whereas It is failing for blank owner (when owner is not set for Group). Any suggestions on how to check blank owner.

I am trying 

(entitlement.ownerRank1 == null) or (entitlement.ownerRank1.size () == 0)

But this does not go-to custom approver group, instead it goes to Saviynt admin for approval

 

SeemaDas
New Contributor III
New Contributor III

Worked for blank owner as well with following condition

(entitlement.entowners == null) or (entitlement.entowners.size() == 0 )

 

Dhruv_S
Saviynt Employee
Saviynt Employee

Thanks for the update. If the original question is answered, please accept it as Solution to help others who may have a similar problem.

Here we skipped blocked using if else condition what if product should auto approve ? Business requirement is block should be visible with comment as auto approved.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.