Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Check Entitlement Value in Endpoint Access Query

harishyara
Regular Contributor
Regular Contributor

Team,

Use Case - If user is part of Entitlement_Value1 of endpoint EDP1 then only we need to show the Endpoint EDP2 to view/request from ARS. Please help with access query syntax.

2 REPLIES 2

PremMahadikar
All-Star
All-Star

Hi @harishyara ,

Use the below query in the endpoint EDP2 access query filter:

where USERS.USERKEY in (SELECT distinct UA.userkey FROM ACCOUNTS A, USER_ACCOUNTS UA, ENDPOINTS E, account_entitlements1 ae1 WHERE A.ACCOUNTKEY = UA.ACCOUNTKEY AND A.ENDPOINTKEY = E.ENDPOINTKEY and ae1.accountkey = a.accountkey and A.endpointkey=EDP1 and ae1.entitlement_valuekey = (select entitlement_valuekey from entitlement_values where entitlement_value='XXX'))

 

If this helps, please consider selecting Accept As Solution and hit Kudos

rushikeshvartak
All-Star
All-Star

WHERE USERS.USERKEY IN (SELECT DISTINCT UA.USERKEY FROM ACCOUNTS A JOIN USER_ACCOUNTS UA ON A.ACCOUNTKEY = UA.ACCOUNTKEY JOIN ENDPOINTS E ON A.ENDPOINTKEY = E.ENDPOINTKEY JOIN ACCOUNT_ENTITLEMENTS1 AE1 ON A.ACCOUNTKEY = AE1.ACCOUNTKEY JOIN ENTITLEMENT_VALUES EV ON AE1.ENTITLEMENT_VALUEKEY = EV.ENTITLEMENT_VALUEKEY WHERE E.ENDPOINTNAME = 'ENDPOINTNAME' AND EV.ENTITLEMENT_VALUE = 'ENTITLEMENT_NAME');

 

  • Update Endpoint Name & entitlement Name 
  • Add Above query in Endpoint 2 - Access query section

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.