Dynamically assign an active directory group entitlement from 1 technical rule

[aundreb]

Hello,

Wondering if it is possible to dynamically assign an active directory group  using 1 technical rule based on the identities first letter of their lastname attribute.

Dynamic portion of the group would be like this Entilement_{alphabet letters}

So for example:

If first letter of lastname for a user's identity is A then assign Entitlement_AB

If first letter of lastname for a user's identity is B also assign Entitlement_AB

The client has created AD groups that cover a few letters of the alphabet each, Entitlement_CD, Entitlement_EF, etc.

How would you dynamically assign the entitlement without the AB, CD, EF portion of the group being stored somewhere? Trying to achieve this without having to create multiple rules.

[rushikeshvartak]

Role-${user.firstname[0]user.lastname[0]}

[aundreb]

Hi Rushikesh,

I don't believe this would work. I am looking to assign the group based on the first letter of the last name to determine the value of the group. The letter just determines the group, so if last name starts with a or b, then assign the group Entilement_AB, if last name starts with c or d then assign the group Entitlement_CD. Some groups have 3 or 4 letters in them for example Entitlement_WXYZ. How can you do this without multiple technical rules?

[rushikeshvartak]

This can’t be achieved. You can go with analytics report