Click HERE to see how Saviynt Intelligence is transforming the industry. |
08/26/2024 09:38 PM
Hi Experts,
We are having two dynamic variables AccessType and UserAccessType where AccessType value is entitlement customproperty5(production,Non-Production,Allow List etc) and UserAccessType is entitlement customproperty6(user) in ARS page that is working fine.
We have 10 AD based application and each application has separate Dynamic Attribute and Config for Requestable Entitlement in ARS in endpoint level and its working fine.
Config for Requestable Entitlement in ARS:
ev.customproperty5 ='${AccessType}' OR ('${AccessType}' = 'All' AND ev.customproperty5 IS NOT NULL)) and (ev.customproperty6 ='${UserAccessType}' or ev.customproperty6='All')
Now the requirement is instead of configuring each endpoint Config for Requestable Entitlement in ARS we need to configure globally for all AD based application in Global configuration-->Request-->Application-->Request entitlement query.
But the problem is dynamic value is not working, for example using direct value(prod,non-prod) is working(end user can able to request for entitlement)
Query: AND ev.customproperty5 in ('Production','Non-Production') and customproperty6='User'
But using Dynamic value(${AccessType} or ${UserAccessType} is not working.
QUERY: AND ev.customproperty5 ='${AccessType}' and customproperty6='${UserAccessType}'
Please suggest any other alternative way to configure the dynamic value in GC.
08/26/2024 10:09 PM - edited 08/26/2024 10:11 PM
Hi @Akilan if you apply in global config the query will apply to all the endpoints not only AD ones.
FYI I tried it in older version it never worked.
08/26/2024 10:12 PM
@Akilan This is Not supported. Create a ticket with Saviynt.
08/26/2024 10:32 PM