Assigning birthright entitlements to user based on options selected in create/update user form

[SumathiSomala]

Hi All,
I have usecase that i have created one DA(multi select from SQL Query) in create user form if user selects multiple options i have to assign multiple AD groups as birth right access to the user based the selection.

Example:1.Suppose user selected US,UK,India options from create user form then user should get access to below AD groups.

CN=PA-US,OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX
CN=PA-UK,OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX
CN=PA-India,OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX

2.Suppose user selected US,India options from create user form then user should get access to below AD groups.

CN=PA-US,OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX
CN=PA-India,OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX

To achieve this i have created 10 technical rules for 10 options.
Is these are any possibility to reduce the technical rule count?

Any help would be appreciated.

[ejeong]

yes possible, add country value into one of user.customproperty

then in tech rule, 

you can do like 

${user.customproperty},OU=Security Groups,OU=XXXX Groups,DC=XXXX,DC=XXXX

[SumathiSomala]

@ejeong i have tried this but it will work for single selection , not for multiple selection.

Values will be stored like US,UK,India in User's customproperty so if it not possible to assign dynamically.

Any other ideas?

[Saathvik]

@SumathiSomala : what if you create multiple technical rules based on country and use condition like below for each country and trigger respective group to be added

Or using Advanced config with below query

a.customproperty52 like 'US,%' OR a.customproperty52 like '%,US' OR a.customproperty52 like '%,US,%'

[SumathiSomala]

Thanks @Saathvik Already i have configured in the same way, but we have 25 multiple selection options so I have to create 25 rules to assign AD group as birthright access.

Is these are any possibility to reduce the technical rule count?

[ejeong]

for multi selection, I don't think it's feasible. maybe you need to it with analytics (actionable)