Copy access in request form is not working if query present in Entitlement type configuration.

[SudheerKaneti]

Hi All,

We have a requirement that user should copy access of another user he selects. So that we have enabled copy access in endpoint configuration.

But copy access functionality is not working and not returning any entitlement when any query present in  "Config for Requestable Entitlement in ARS" in entitlement type configuration which that query filter out the entitlements based on the dynamic attributes selected by the user in the request form.

When we removed the query in "Config for Requestable Entitlement in ARS" then the copy access is working.

Basically the user should either select access based on the dynamic attributes filled in the form or copy the access from other user, but both functionalities are not working in the same form.

Please let me know how can we resolve this issue.

Thank you,

Sudheer Kaneti.

[rushikeshvartak]

• Please raise saviynt support ticket for issue with logs and issue replication steps 

[SudheerKaneti · Accepted solution]

Hi Rushikesh/Team,

We have found the  reason and solution for this issue. 

The reason is that we are putting dynamic attribute variable in the "Config for Requestable Entitlement in ARS" in entitlement type configuration like below:

ev.status = 1 and ev.customproperty2 in ('${dynAttribute}') and ev.customproperty2 !=''

Later we have understood whenever the user using the Copy Access, the dynAttribute  taking null value because the user is not selecting any dynattribute value in the ars form and directly selecting the access from other user using Copy Access which resulting in no entitlement returning in "Select SAP Roles" section.

So for the solution, we have modified the above query like below by putting an OR condition in between to accept the null value as well.

(ev.customproperty2 ='${dynAttribute}' and ev.customproperty2 !='') or ('${dynAttribute}' = '' and ev.status=1) which resolve the copy access issue.

Thank you,

Sudheer Kaneti.