Dynamic attributes

[nitishdas]

I need one help related to a dynamic attribute created under endpoint level. The data type is selected as SQL ENUM but when the user is trying to raise the access request through ARS his account name "e_tnitime" is not populating in the dynamic attribute.

[dgandhi]

Have you configured the account name rule at endpoint level?

[nitishdas]

 Nope it is not configured at endpoint level

[dgandhi]

Can you please configure that so that account name will be auto populated on the ARS request page.

[nitishdas]

Hello,

Could you please let me know if the below query can autopopulate the account name "e_titme" in the dynamic attribute while user is raising access request for the application through ARS:

SELECT distinct a.NAME as ID FROM USER_ACCOUNTS ua INNER JOIN ACCOUNTS a ON ua.ACCOUNTKEY = a.ACCOUNTKEY INNER JOIN ENDPOINTS e ON a.ENDPOINTKEY = e.ENDPOINTKEY WHERE e.endpointname IN ('Active Directory','Active Directory L1 & L2 Admin Accounts','Asset Admin','Active Directory App&Servers Admin Account') AND NAME REGEXP (select case when ${UPN} = '1 - Standard account' Then '^[^_]+\$' when ${UPN} = '2 - Non-standard A_ account (only for specific use)' Then '^a_[^_]+\$' when ${UPN} = '3 - Non-standard L_ account (only for specific use)' Then '^l_[^_]+\$' when ${UPN} = '4 - Non-standard W_ account (only for specific use)' Then '^w_[^_]+\$' else 'xxxx' End) AND ua.USERKEY='${this.binding.variables.containsKey("requestee")?requestee:""}';

[Saviynt_learner]

Hi @nitishdas 

Your question is not clear, why are you  referring to dynamic attributes here. If you follow the steps  that @dgandhi  mentioned above, the account name will auto-populate while requesting. 

Please let me know if your question was different than what we understood.

[nitishdas]

The issue is that there is one dynamic attribute for one of the applications in our environment, and in that dynamic attribute is working as a child attribute for another one. For example if we select some value in the parent dynamic attribute so the child attribute should auto populate the account name of the user which should be his AD's account name. So, the above query which I have pasted is for the child attribute and it is not populating user's AD account name(e_tntime)

[rushikeshvartak]

Please share request form screenshot & what is type of request ?

[nitishdas]

Sure,

This is the account name of the user:

This is the request form:

User will be selecting any of the values from the drop down User Profile name first which is the parent attribute:

Once user selects for example 1-standard account then the application name attribute should populate as "e_tmtime" which is basically the AD account name which I provided the screenshot above.