Entitlement assigned from Role

[ejeong]

hello.

We have follwings

ROLE A

ENT 1

EMT 2

ENT 3

ENT 1 2 3 are part of Role A

One user got Role A with those three ents. Not one of them was revoked by either actionable report or campaign.

If user goes to Request Enterprise Role and request Role A again. Can this user is able to get one of ents revoked?

Our goal is for this user get this ent without approval since user has the role.

I am considering three options

1) re-request role if ent missing is re-assigned. Then i will think about workflow.

2) v2022 club feature. I saw this demo in converge. From my understanding, user can get previous approved access without addtional approval

3) actioable report, running report daily base and find user with the role and missed one of ent. Then create add access task for them

Please advise how i can achieve this case.

[rushikeshvartak]

Revoke task are not generating reason due to you might not enable create dependent tasks under endpoint

you can find such roles where assignedfromrole is null

[ejeong]

Hi we have usecase like manager requested to revoke one ent via ars.

[rushikeshvartak]

Its not best practice. If entitlement requestable separately then it should not be part of role and vice versa

[ejeong]

Can we use account_entitlement1 column im requestable ent query?

[rushikeshvartak]

No. Only entitlement_values table can be used

you can create dynamic attribute and refer there

[ejeong]

Lets say user request multiple ents, how can we achieve with dynamic attr?

[rushikeshvartak]

Use multi select dynamic attribute.

what is use case