Access to Endpoints based on SAV Role

[sandeepgudipudi]

Hi

We have a requirement where we want to show the endpoint if requestor has a particular SAV Role [ROLE_ABC_ENDUSER], but requestor can see All Endpoints 

This is Sav role configuration

[rushikeshvartak]

• Instead of sav role use endpoint access query

[sandeepgudipudi]

I have 10 endpoints and out of 10, only 1 endpoint should be visible to ROLE_ABC_ENDUSER,

here i want to use access query to only 1 endpoint not for remaining endpoints, the rest of the endpoints should be visible to ROLE_XYZ_ENDUSER

[sandeepgudipudi]

Why cant we limit in sav roles?

[rushikeshvartak]

You can implement this with access query

where '${requestor.id}' in (select us.userkey from savroles sv, user_savroles us where sv.rolekey=us.rolekey and sv.rolename in ('ROLE_ABC_ENDUSER'))

[sandeepgudipudi]

Hi,

I added access query to endpoint, but still it is showing other endpoints also

[rushikeshvartak]

You need to add for all endpoints if you want to show use IN else use NOT IN in query

[sandeepgudipudi]

Why can't we leverage sav role to show endpoints instead of access query

[rushikeshvartak]

Sav role is used to show application where as you have multiple permutation some user should be able to visible so you need to use access query

[sandeepgudipudi]

Can you elaborate what is meant by "Sav role is used to show application"

[rushikeshvartak]

Refer https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter09-SAV-Roles/Creating-and-Ma...

[sandeepgudipudi]

Here what is the point of having Organization under Identity Repository, The organization has endpoints{added 1 endpoint},entitlements and users[Added as art of customer name imported from csv] and the same org is added in savrole.

Organizations

Select one or more than one organization that the SAV role assignee user can access.

Show Users in Request Access based on Organizations

Select one or more than one organization to displays the list of users, requesting access to an application based on organizations.