Limit Entitlement Request based on User CP

[sab2]

Hello,

We are working on a use case for our access request. We want to know if it is possible to show / hide entitlements based on the users custom property values.

For example, in the entitlement type we could add something like

ev.entitlement_value like '%Entitlement1%' and user.customproperty2='ABC12'

Is it possible to show entitlement based on users CP? If yes, where is the best place to configure this?

Thank you!

[sudeshjaiswal]

Hello @sab2,

User attributes cannot be used directly in entitlement filter conditions. However, you can achieve this by transferring the relevant user custom property value into a custom property within the entitlements. Then, you can use a filter condition similar to the following:

entitlement.customproperty1 in (select user.customproperty2 from users where user.userkey in (${requestee}))

Alternatively, you can accomplish the same goal by utilizing dynamic attributes and filtering the entitlements based on that dynamic attribute.

Thanks.