Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

ARS dynamic attributes - fetch calculated account name

piotrj
New Contributor III
New Contributor III

Hi,

 

We are trying to create dynamic attribute based on calculated  account name in ARS request.

When requests is raised account name is calculated using endpoint's 'Account name Rule'.

What attribute we should we use in SQL query for dynamic attribute?

piotrj_0-1723200451221.png

We started with this query (relevant part only)

select case when ${acctype} = 'Standard Admin' then ${account}

 

 

Kind regards,

Piotr

 

 

10 REPLIES 10

rushikeshvartak
All-Star
All-Star
  • For normal end user account account name rule is used and you can’t use dynamic attribute 
  • service account - you can leverage dynamic attribute in service account name rule under endpoint 

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Thank you Rushikesh. I'm not sure you understand what we're trying to achieve. We have account naming rule that calculates account name as shown in the screenshot above. We then would like to use this calculated account name in the dynamic attribute SQL query.

Kind regards,

Piotr

Thats not supported


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Thank you, we'll use query then.

NM
Honored Contributor III
Honored Contributor III

Hi @piotrj , I don't think so you can refer it in other dynamic attribute.

What you can do is construct an SQL query in dynamic attribute.


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

piotrj
New Contributor III
New Contributor III

Thank you, that's what we're going to do. I was trying to simplify thnings!

NM
Honored Contributor III
Honored Contributor III

If you found the response please accept the solution and click on kudos button 

Thanks 🙂


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

hareeshreddyk
New Contributor III
New Contributor III

Hi @piotrj ,

What is the attribute for this label 'Account Name' in ARS you tried to use ?

Regards,

HR

NM
Honored Contributor III
Honored Contributor III

Hi @hareeshreddyk it's not supported you can use it in other DA


If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'

hareeshreddyk
New Contributor III
New Contributor III

Hli @NM, So Can not we use the generated Account Name value in the Connection?

I have tried with "accountsObj?.accountID" to get the "Account Name" value in into target from AddaccessJSON it was successfull,

\"username\": \"${requestAccessAttributes.get('ACCOUNTTYPE') == 'Service Account'? accountsObj?.accountID

but in CreateaccountJSON the same "accountsObj?.accountID" did not work.

Requirement is to get the "Account Name" value into target. So what would be the variable in CreateAccountJSON, AddaccessJSON?

hareeshreddyk_0-1728461803425.png

 

 

So how can i achieve this?