Filter Applications in ARS page based on user OU

[Pagrahari]

We have a requirement where we want user which belongs to a particular OU in AD should be able to see certain applications in ARS page. Can someone please help on how we can achieve this requirement?

[rushikeshvartak]

Does account domain is getting stored in user profile ?

[Pagrahari]

Yes the domain is getting set in the user profile

[rushikeshvartak]

Consider domain is stored in users property

create single select drop down dynamic attribute as 

select u.customproperty32 as ID from users u where u.userkey=${requestee}

if domain is not stored and DN is stored then use substring and show domain on request form 

In entitlement type configuration 

ev.status=1 and ev.customproperty1 = 'TRUE' and ev.customproperty19 like '${Domain}'

here domain is also stored in entitlement customproperty 19

if you dont want to store use substring in entitlement value and implement 

[Pagrahari]

Could you please explain in detail as how to configure these settings in Saviynt as I am fairly new. Really appreciate your help. Thanks a lot 🙂

[rushikeshvartak]

• Store domain of user in CP32 
• Create Dynamic attribute under Endpoint
  • Query : select u.customproperty32 as ID from users u where u.userkey=${requestee}
•  
• 
• Configure Entitlement Type Query - Under Endpoint - Entitlement Type - View Detail Button
• 
• ev.status=1 and ev.customproperty19 like '${Domain}'
• Make sure Entitlement CP19 also stored domain

[dgandhi]

Use Access Query.

Below document for reference:

https://docs.saviyntcloud.com/bundle/CPAM-Admin-Guide-v24x/page/Content/Manage-Endpoints/Endpoint-Vi...