Filter Users on Update user form

[Sbachu]

Use Case: 

Once we select update user request form, It displays all identities in our system. The requirement we have is to make only a set of identities under an organization to be displayed or  just a category of employee type to be displayed. 

for example: we have few users with employee type set to 'XYZ' we only need these users to be displayed in update user request form. is it possible? 

[PremMahadikar]

Hi @Sbachu ,

This is possible. The configuration is under users' sav role.

Refer sample JSON for Organization filter:

[
    {
        "for":"UpdateUserRequest",
        "query":"select a from Users a where a.id in (select cu.userkey from Customer_Users cu where cu.customerkey in (select c.id from Customer c where c.customername='${users.customer}'))"
    }
]

Refer solution article: Solved: how to control the organization name in a Whom To ... - Saviynt Forums - 88568

Refer sample JSON for employeetype filter:

[
{
"for":"RequestAccessforOthers","query":"select a from Users a where a.manager= ${users.id} and a.statuskey=1"},{"for":"UpdateUserRequest","query":"select a from Users a where a.employeeType IN ('External','Third Party','Vendor') and a.manager= ${users.id} and a.statuskey=1"},{"for":"RequestAccessOthersMultiUser","query":"select a from Users a where a.manager= ${users.id} and a.statuskey=1"},{"for":"ViewExistingAccess","query":"select a from Users a where a.manager= ${users.id} and a.statuskey=1"
}
]

For your use case, below is the solution!

[{"for":"UpdateUserRequest","query":"select a from Users a where a.employeeType IN ('XYZ') and a.statuskey=1"}]

If this helps your question, please select consider Accept As Solution and hit Kudos

[Raghu]

@Sbachu  Try Respected SAV Role made some below changes

[Sbachu]

This isn't working as expected. I still see all users when i use the 'Update User Request' form. Are there any feature access that i should avoid in SAV Role? 

[rushikeshvartak]

• You need to add condition to all sav roles user having

[PremMahadikar · Accepted solution]

@Sbachu ,

The query is right, and I could see filtered users. Please re-check once. Please try different filters in where clause to get only those records..

You can try only query in HQL as well (Both are working)

If this helps, please select Accept As Solution and hit Kudos

[Sbachu]

its working. Thanks All @PremMahadikar  @rushikeshvartak @Raghu 

[Sbachu]

can we restrict the view of Update User Request form to a particular employee type irrespective of SAV Role?  
Our users (Managers) will have variety of SAV roles so we want to restrict this view at form level and not based on SAV roles.

[rushikeshvartak]

It can be only controlled based on sav role