Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

How to fetch user's customproperty value in Dynamic attribute in ARS.

sabyasachi1
New Contributor III
New Contributor III

Hi team, I require your attention.

Requirement: We have an application that allows both users and their managers to request a new account and entitlements. However, if the user's customproperty15 is null, neither the user nor their manager can raise a request for that user.

The proposed solution: We are trying to achieve this use case by fetching the customproperty15 value in the dynamic attribute section. If the user's customproperty15 is not null, the value will be automatically populated in the dynamic attribute section (CP15) when raising a request for the application. If the value is populated, the user can proceed to Review and Submit or raise a request. However, if the user's customproperty15 is null, the value will not be automatically populated in the dynamic attribute section, and neither the user nor the manager will be able to raise a request.

In the attached screenshot, the customproperty15 value must be automatically populated in the CP15 section when the user or their manager raises a request.
Attribute Level Name: CP15

sabyasachi1_0-1720530696278.png

We have tried all the below queries in the dynamic attribute section:

select customproperty15 as ID from users where username = ${users.username}

select customproperty15 as ID from users where userkey = ${user.id}

select customproperty15 as ID from users where userkey = ${requestee}

select customproperty15 as ID from users where userkey=${user.userkey}

 

sabyasachi1_1-1720530714052.png

 

Also, we referred to the below link.

Referred Link:-https://forums.saviynt.com/t5/ars/various-usage-of-dynamic-attributes/ta-p/37329

Please let us know if any possible solution is there.

Regards,
Sabyasachi Mohanty

 

4 REPLIES 4

naveenss
All-Star
All-Star

Hi @sabyasachi1 this is working fine in 24.4

naveenss_0-1720533241881.png

 

naveenss_1-1720533330198.png

 

Can you please compare the configurations for dynamic attribute with the above screenshot? Also, do you see any error in the logs, when you land on the request access page?

 

Regards,
Naveen Sakleshpur
If this reply answered your question, please click the Accept As Solution button to help future users who may have a similar problem.

Raghu
All-Star
All-Star

@sabyasachi1  below script working in 24.4v

we also using

select customproperty15 as ID from users where userkey = ${requestee}


Thanks,
Raghu
If this reply answered your question, Please Accept As Solution and hit Kudos.

rushikeshvartak
All-Star
All-Star
  • Instead of showing customproperty 15 You can show user friendly messaage to end user/ manager why request is not allowed
  • Dynamic attribute quyry - select case when customproperty15 is not null then 'You are authorized to raise request' else 'You are not authorized to raise request ' as ID from users where userkey = ${requestee}
  • Entitlement Type Query : '${RESTRICTIONS}' like '%you are authorized%'
  • rushikeshvartak_0-1720535446489.png

    RESTRICTIONS is dynamic attribute name


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

NikitaPawar_
New Contributor III
New Contributor III

Try this query 

WHERE USERS.USERKEY IN (SELECT customproperty15 FROM USERS WHERE USERS.userkey = ${requestee.id} ) AND ${requestee.customproperty15} IS NOT NULL 

It's achieved required results as per your usecase.