Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Entitlement Type not showing when adding Dynamic Attribute

Abhinav
New Contributor III
New Contributor III

Hi Experts,

There is a app App1 which is having TWO requestable entitlements type E1 and E2.

For requirement where we have to filter out some entitlements of E1, depending upon user attribute.

I have created a Dynamic Attribute (DA) to filter out entitlement values (of E1) and then using this DA in Entitlement Type E1 > 'Config for Requestable Entitlement in ARS' = ev.entitlement_value NOT IN ('${<DynamicATtribute>}').

This is showing correct results in Form for E1.

But when I am making this DA, 'Hide on create', request Form stops showing entitlement Type E2. E2 is not being utilized or rereferred in any DA or E1.

Weird enough it is showing both E1 (filtered) and E2 when entitlement type E2 > Config for Requestable Entitlement in ARS = ev.entitlement_value NOT IN ('${CalculatedEntitlement}').

There should not be any relation between E1 and E2 values, please someone help me explain and correct this behavior.

Thanks,

 

4 REPLIES 4

NM
Honored Contributor II
Honored Contributor II

Hi @Abhinav , check if in entitlement type 2 is there anything added in selected config for entitlement.

Abhinav
New Contributor III
New Contributor III

Thanks NM for response.

There is no configuration for E2, screenshot below

Abhinav_0-1721653263571.png

 

  • Does hierarchy option enabled under entitlement type E1 ?
  • rushikeshvartak_0-1721665045184.png

     

  • If you don't hide does it works ?
  • Share logs to validate backend SQL Query

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

UPDATE: -

  • NO hierarchy defined on E1 or E2
  • It was showing correctly with I was not hiding DA.
  • While collecting the log, I noticed error reported in DA's SQL query i.e. {}|java.lang.IllegalArgumentException: org.hibernate.hql.internal.ast.QuerySyntaxException: expecting CLOSE, found 'yes' near line . Part of query where issue was reported:- "( ( select lower(users.CUSTOMPROPERTY39) from users where users.userkey=${requestee} ) = 'yes' )". Although SQL query is giving correct results in DA and hence in Entitlements List.

I have now modified the query as '( ( select lower(users.CUSTOMPROPERTY39) from users where users.userkey IN ('${requestee}')) = 'yes' )'. This is showing correct results in E1 and also E2 values.

Thanks for help !!