Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Multiple Values in Same Attribute

Sbachu
New Contributor II
New Contributor II

I am trying to implement below solution using a value we enter in CP65 (these are scrum teams) 

Tech Rule:

If Users.Custom Property 65 NOT EQUALS "Null"
Then
Assign ROLE::${user.customproperty65}_CFT

Our issue is we have users part of multiple scrum teams. How can we implement same without using multiple Custom properties

Saviynt Suggestion: 

This scenario provides details about assigning an enterprise role to a user based on the dynamic value of 'City' to which the user belongs. For example, let’s assume there are three cities such as: 'LA', 'SFO' and 'Bangalore'. Analogous to these cities, there are three Enterprise Roles defined specifically for each of these 3 cities such as: 'LAFinance', 'SFOFinance', and 'BloreFinance' respectively already available under Roles list page. Now, based on the user's city, which can be 'LA', 'SFO' or 'Bangalore', you want to assign the respective Enterprise Role: 'LAFinance', 'SFOFinanace', and 'BangaloreFinance' to user when a user is created or updated in EIC. To achieve this, define the following parameters in the technical rule:

  • Condition:
    • Object: Users
    • Attribute: City
    • Condition: Not Equals
    • Value: null
  • Action
    • Object Type: Enterprise Roles
    • Object: ${user.city}Finance
    • Attribute: Assign
13 REPLIES 13

rushikeshvartak
All-Star
All-Star

Value should be unique to match 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

in your example, lets say the same user is member of multiple cities like LA and SFO at the same time. how would you solve this problem. 

Use analytics report


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

can you elaborate on how we can achieve this using analytics report

  • get values comma seprated using SQL query
  • use provision access 
  • schedule the report

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

dgandhi
All-Star
All-Star

What will be stored in customproperty65? Like LA,SFO,Banglore? and if yes then you want to assign 3 roles to the user?

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

Sbachu
New Contributor II
New Contributor II

yes, in CP 65 we will store scrum team names like ABC, XYZ, DEF etc.... and based on value we will assign role like ABC_ScrumTeam, XYZ_Scrum team and so on.... 

but the situation we are trying to solve is what if a user is part if multiple scrum teams. i don't want to use one CP for ABC and other for XYZ and create two technical rules. 

ideally i would like to include both in one CP and provision respective roles 

 

Prepare query to exact value this will resolve


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

how to include ABC, XYZ and DEF team names in same CP and ensure user is added to 3 different roles. 

You need to add it from source


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

can you suggest what seperator i can use to separate values in same attribute

You can use ~


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Sbachu
New Contributor II
New Contributor II

any solution for this @dgandhi