How to escape null value for saviynt not managed AD attributes for secondary accounts

[Harsha]

Hi Team,

Currently in the Active Directory we manage only Primary accounts and for secondary accounts we add only couple of attributes,for the rest we dont have permission. So its throwing insuffient rights error. Initially we tried skip else part  it didnt work then we used empty or null string as we dont have permission that didnt work as well.And now we tried below logic as per forum suggestion didnt work.Please help us solve how we can escape or bypass these attributes which we dont manage for secondary accounts.
Below is snippet :
"givenName":"${if(task.accountKey.accounttype.equals('Primary')){user.firstname}else {if(task.accountKey.accounttype.equals('Secondary'))(SAVIYNTNOTCHANGED)}}"

PS: I am referring to updateaacountjson

Thanks,
Harsha

[sahil]

Let me check this and will update.

[sahil]

Below is a sample condition that you can use to create yours and test.

${if(requestAccessAttributes.get('ACCOUNTTYPE') == 'Service Account'){'ServiceAccount'} else {'Personal'}}"

or 

(account.accountType == 'Primary'){user.firstname} else {'Personal'}