Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
07/24/2024 08:32 AM
We have a requirement to send email notices to a secondary manager if populated on the identity. I have attempted to include them in the cc field of the email template. I have tried using ${user.secondaryManager.email} and ${secondaryManager.email} but none have succeeded. Is there documentation that references how to include them in a recipient list like manager?
Solved! Go to Solution.
07/24/2024 08:39 AM
07/24/2024 08:48 AM
Currently I just have a User Update Rule so I can quickly test the email. Ultimately it will be in the Active Directory New Account task complete so the secondary manager can receive it. I updated the email and used what you provided, but there is no secondary manager in the body:
entitlement_endpoint_list = []br> manager = manager_userbr> createdBy = manager_user> service_accounts_list = []br> ownerOnTerminate = manager_user> serviceaccount_endpoints_list = []br> baseUrlForEmail = https://emaillinkbr> user = test.user@aol.combr> requestor = manager_user> entitlement_value_list = []br> out = java.io.PrintWriter@250b8c64br> [entitlement_endpoint_list:[], manager:manager_user, createdBy:manager_user, service_accounts_list:[], ownerOnTerminate:aalvarez_adm_twc, serviceaccount_endpoints_list:[], baseUrlForEmail:https://emaillink , user:test.user@aol.com, requestor:manager_user, entitlement_value_list:[], out:java.io.PrintWriter@250b8c64]
07/24/2024 08:52 AM
Attach to New Account in AD and validate
07/24/2024 09:06 AM
Again, no data pertaining to secondary manager.
07/24/2024 09:08 AM
07/24/2024 09:13 AM
resourceOwners > tasktype > manager > accountOwners = []br> randompassword > entitlement > provisioningOwners > users > requestor > account_password = > task > accountname > requestid > endpointDisplayName > account_name > endpointOwners > baseUrlForEmail > user > taskaction > account > [resourceOwners:, tasktype, manager, accountOwners:[], randompassword, entitlement:[], provisioningOwners:, users:, requestor, account_password, task, accountname, requestid:AutoGenerated, endpointDisplayName, account_name, endpointOwners, baseUrlForEmail, user, taskaction, account]
07/24/2024 09:19 AM
${users.secondaryManager.email}
07/24/2024 01:18 PM
Attempted to use that in the email body as a test, which was not successful.
07/24/2024 06:57 PM
Could you kindly provide a detailed snapshot of the information extracted from the logs, encompassing errors and other pertinent functionality details encountered during the execution of this process? Your assistance in furnishing this information would greatly aid in the analysis and resolution of any issues .
‼️‼️⚠️Do not upload any attachments that contain sensitive information, such as IP Addresses, URLs, Company/Employee Names, Email Addresses, etc.⚠️‼️‼️
08/05/2024 06:57 AM
I'm not entirely sure how to attach logs while validating no sensitive data is present. Is there a reference on scrubbing logs?
08/05/2024 06:38 PM
08/12/2024 07:48 AM
08/12/2024 07:59 AM
Try ${task?.userKey?.secondaryManager?.email}
08/21/2024 11:49 AM
Was able to get access to the environment to retest. Still receive the value you supplied as plain text in the email. Not the value of the secondary manager's email.
08/21/2024 12:08 PM
I did try modifying the template to just ${user.secondaryManager} and that worked and returned the manager. I think it is purely an issue of the email cannot be linked in the user object since it doesn't exist in the reference. Is there a way to pull a user by username and reference the email?
08/21/2024 12:20 PM
${com.saviynt.ecm.identitywarehouse.domain.Users.get(user?.secondaryManager)?.username}
08/21/2024 12:31 PM
That also just returns the string literal. Does not seem to function as intended.
08/21/2024 01:53 PM
Share screenshot how you used?
08/21/2024 01:58 PM
08/21/2024 02:00 PM
Where is email template attached ? Can you try on TO/CC
08/21/2024 02:17 PM
Utilized the code in the CC but no emails are coming through when retesting.
08/21/2024 02:32 PM
Where is email template attached ?
Please share logs and highlights line number in file from which logs can be reviewed
08/21/2024 02:42 PM
Continued testing with the body of the email. If it ever output all literal strings, I knew the test was a failure. I was finally able to resolve the secondary manager's email by modifying the input of the get method to point to the secondary manager's id. Works in body, cc, and bcc.
Final code used:
${com.saviynt.ecm.identitywarehouse.domain.Users.get(user.secondaryManager.id).email}
08/05/2024 08:02 PM - edited 08/05/2024 08:03 PM
Hello @aalvarez_mk -
At Saviynt, we take security and privacy seriously.
As the Saviynt Community Forum is an open forum, viewable by anyone on the internet, we make it a priority to ensure that customers' and partners' Personally Identifiable Information (PII) is never disclosed. This also includes other technical information that malicious individuals could potentially use against you or your company.
Best Practices:
Common Items to Look For:
By following these guidelines, you help maintain the security and privacy of all forum participants.
Below are two example of how to edit/mask your information:
WHEN (companyname = 'XXXX' OR orgunitid = XXXXXXXXX)
AND LENGTH(lastname) >= 5
THEN REPLACE(CONCAT(SUBSTRING(lastname, 1, 5), SUBSTRING(firstname, 1, 2)), 'ñ', 'n')
ELSE NULL
Thank you,
Dave
07/24/2024 08:39 AM - edited 07/24/2024 08:41 AM
@aalvarez_mk where did you attach the email template?
did you refer below forum threads?
try with if else condition
https://forums.saviynt.com/t5/identity-governance/email-templte-to-recipe-logic/m-p/79033
08/05/2024 06:59 AM
I have tried user.secondaryManager.email previously which does not print anything per Rushikesh. As there's no if/else condition to try when dumping all variables, I don't think that would be impacting anything.