Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Reject Account Creation Request if all the entitlements are rejected as well - Case Scenario

avinash_16
New Contributor III
New Contributor III

Greetings,

There is a case scenario when a user raises a request for an application to create new accounts along with entitlements (let's consider entA and entB) and submits the request. Now since we mostly use a parallel workflow so account and entitlement flows in different path. For entitlement flow, we have a if-else box which checks for one of the customproperty whether it has a keyword populated so that if it does, it redirects through a custom assignment box where a user decides whether to approve/reject the entitlement request. Let's assume that, if the user rejects both entA and entB entitlements, is there a way we can auto-reject the account creation request as well? 

We tried with EntitlementsOnly option specified in Create Task Action but there scenarios where user wants the account creation alone.
If there are two entitlement requests where one entitlement alone is redirected to customAssignment and other is not, then we won't need to reject the Account Creation Request. 

Attaching the WF for reference:

avinash_16_0-1722321148924.png


Thanks.

3 REPLIES 3

rushikeshvartak
All-Star
All-Star

Refer https://forums.saviynt.com/t5/saviynt-knowledge-base/how-to-configure-all-approval-workflow-to-creat...


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

@rushikeshvartak Thank you for sharing the article however the above link is something different of a use case. It explains how to create tasks after all the approval is done whereas here, we want to check that if all the entitlements are rejected when it is assigned to the CustomAssignment user, how we can we auto-reject the account creation as well before reaching the manager eventhough Account creation request is assigned to the Manager itself? The sav role assigned to CustomAssignment user can only approve/reject access requests which are assigned to the user alone.

Holding accounts creation can be handled using entitlement only configuration only. As thete can be multiple permutations combinations while approving request as full rejection / partial rejection


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.