how can I use endpoint owner in a workflow as requestedBy?

[Naz_A]

hello

we are trying to build a workflow, where only endpoint owner can request a new account. 

Any ideas how can I get the endpoint owner? it is a user group by the way. 

Thanks!

[naveenss]

Can you please  elaborate on the use case? Do you want to auto-reject the request if the requestor is not the endpoint owner? Or do you want to restrict the application to be visible in the application catalog only to the endpoint owners?

[Naz_A]

I want that endpoint owner can request new account for external users, which should go to auto approve and create a task, if the requestor is not the specific endpoint's owner than the request should be rejected automatically. 

right now I have if else conditions for ars request for new account and another if else condition for external users, but i need the middle piece which is for the endpoint owner. 

Can you help me?

[Naz_A]

I am also leaving the logs

[naveenss · Accepted solution]

Try the below code in the workflow if/else block. The language should be "groovy"

(com.saviynt.ecm.identitywarehouse.domain.Usergroup_users.executeQuery("select u.id from Users u,Usergroup_users ug where u.id=ug.userkey AND ug.user_groupkey='${endpoints.ownerkey}' AND u.id='${requestedby.id}'").size()!=0)

 Let me know if this helps.

[Naz_A]

Thank you so much! it worked!!