Design specific users in Workflow based on a predefined mapping

[afauquem]

Hello,

I'd like some advice on how to implement this client scenario.

The customer has a repository in which each application has a role and one or more users associated with it.
For example :
Application 1,IS Expert,User A
Application 1, Quality Assurance, User F

I would specify that these roles are not application roles but general roles common to each application and used to ensure that the application runs properly.

Every day we update this csv file on an SFTP server and store it as a dataset, enabling us to use the values in access requests.

At present, we use a dynamic attribute to retrieve the approver's name directly from the access request form and we use it in the workflow via the dynamic attribute.

The problem with this method is that in the case of deactivation/reactivation, this is done outside the form, so the variable in the dynamic attribute is not retrieved and the request is sent to Admin in the workflow.

What would be the best method of integrating this specific case?

Regards,

Alexis

[NM]

@afauquem you are retrivung the value from target SFTP to saviynt and then storing it in dataset right?

[afauquem]

Correct, this is the mechanism used today but it does not fully meet the need (Impossible to use these values in the account reactivation workflow).

So I'm trying to find out if there are other solutions/if anyone has already encountered this problem.

Regards,

Alexis

[NM]

@afauquem account reactivating you can't access DA

You can use account customproperty for approver 

[afauquem]

This is a possibility, but the risk is that the approver stored in the account attribute may not be up to date at the time of the request.

[NM]

@afauquem before running the prov job have a enhanced query job to update the customproperty.

How frequent does approver gets updated?

Are you using a custom jar to transfer the value to dataset? Is the file stored in datafiles?

[rushikeshvartak]

In dynamic attribute or workflow query you can validate approver status if its active then assign to user group [Support team] who can review request and route to correct new approver