Hiding admin accounts

[CRashmitha]

Hello Team,

We have a required where Users with ROLE_ADMIN sav role should be the only one to request access for other users with ROLE_ADMIN. 

If the user is having Enduser savrole then that should not be able to request for the user who is having Admin Savrole.

We are trying to acheive it by Admin-->identity repository-->Savroles-->Advanced query

Can someone help me with the sample query.

Regards,

Rashmitha

[rushikeshvartak]

Hide on request for access ?

[CRashmitha]

Hello Rushikesh,

Yes whenever the user is raising for the request access for others, the ADMIN accounts should be hide for the users who is having enduser savrole.

Regards,

Rashmitha

[rushikeshvartak]

You can manage in access query of endpoint

userkey not in(select userkey from user_savroles where rolekey=1)

[naveenss]

Hi @CRashmitha ,

If your requirement is to not show the endusers savroles users with the users having ROLE_ADMIN sav role. Try the below query in the "Whom to Request" option as a JSON in the ROLE_ENDUSER sav role.

[{"for":"RequestAccessforOthers","query":"select a from Users a where a.statuskey = 1 and a.id not in (select userkey from User_savroles where rolekey=1)"}]

[CRashmitha]

Hello @naveenss our requirement is if the user is having Enduser savrole then that user should not be able to request for the user who is having Admin Savrole.

We have tried with the below query, and we are able to see only one user under request for others tab

[{"for":"RequestAccessforOthers","query":"select a from Users a where a.statuskey = 1 and a.id not in (select userkey from User_savroles where rolekey=1)"}]

[naveenss]

can you execute the below query in data analyzer and see how many records you're getting?

select count(1) from users a where a.statuskey = 1 and a.userkey not in (select userkey from user_savroles where rolekey=1)

[CRashmitha]

Hello @naveenss , I am fetching more than 10k records.

As part of testing we have created one Enduser savrole and testing with the below query and able to see all the records i mean more than 10k records under request access for others.

[{"for":"RequestAccessforOthers","query":"select a from Users a where a.statuskey = 1 and a.id not in (select userkey from User_savroles where rolekey=1)"}]

[naveenss]

Ok.  Is this resolved? Anymore open issues?