Request access for others - Multi users tile not triggering a pending request

[Akilan]

Hi Team,

We select multiple users and single endpoint and some entitlement. After submitted the request. Pending request is not generating in Request history.

Regards,

Akilan.

[rushikeshvartak]

• Did you checked logs ?
• Share input file 

[Akilan]

Hi @rushikeshvartak ,

1) This happened on 8th-Aug. We can able to get logs for last one week. There is no option to select 8-Aug.
2)We are not using any file to request. we are using UI(tile) to request for bulk users.

[pmahalle]

Hi @Akilan ,

Make sure to add workflow Workflow for requests for multiple users under Global configurations --> Request --> Bulk section. if not added already and check.

[rushikeshvartak]

• Please submit another request and collect logs.
• Also validate under Global config - Request below configuration is set 

• Auto Approve Workflow for Multiuser request upload
• Bulk Approval Email Template 

[NM]

Hi @Akilan , any issue with workflow added under global configuration? do you see an error message when you try to replicate it?

[Akilan]

Hi Experts,

I have added workflow in global configuration. Now i can see the request is pending with manager.

Issue: If i request for 5 users using multiple access other tile. The first user getting pending request but for other 4 users there is no request created. Please help me in this issue.

[rushikeshvartak]

• This can be data issue.
• Attach email template in global configuration to identify issue also validate logs

[Akilan]

Hi @pmahalle , @rushikeshvartak , @NM ,

We have added workflow in SS level. The bulk user tile creating request for add access(user already have account, now we are requesting only for access) but not for new account(User previously doesn't have Account). In email attachment validation column I'm getting comments.

1) User:123 does not have account in the Endpoint: ABC

2) User:123 does not have active Account : 123 in Endpoint ABC 

But User is Active and AD account also active.

[rushikeshvartak]

• Share input file and logs

[Akilan]

Hi @rushikeshvartak ,

We couldn't found any error in log and i copied the data after submitting the request.

NOTE: All users mentioned in data  previously doesn't have account in endpoint which we request.

username	endpoint	accountname	action	entitlementtype	entitlement	startdate	enddate	comment	Validation	Request ID
Users1	A_Endpoint	Users1	Dynamic Attribute	AccessType	All			__GLOBALCOMMENTS__Test	User:Users1 does not have account in the Endpoint: A_Endpoint
Users1	A_Endpoint	Users1	Add Access	memberOf	Ent1			__GLOBALCOMMENTS__Test	User:Users1 does not have active Account: Users1 in Endpoint:A_Endpoint .
Users1	A_Endpoint	Users1	Add Access	memberOf	Ent2			__GLOBALCOMMENTS__Test	User:Users1 does not have active Account: Users1 in Endpoint:A_Endpoint .
Users1	A_Endpoint	Users1	Add Access	memberOf	Ent3			__GLOBALCOMMENTS__Test	User:Users1 does not have active Account: Users1 in Endpoint:A_Endpoint .
Users2	A_Endpoint	Users2	Dynamic Attribute	AccessType	All			__GLOBALCOMMENTS__Test	User:Users2 does not have account in the Endpoint: A_Endpoint
Users2	A_Endpoint	Users2	Add Access	memberOf	Ent1			__GLOBALCOMMENTS__Test	User:Users2 does not have active Account: Users2 in Endpoint:A_Endpoint .
Users2	A_Endpoint	Users2	Add Access	memberOf	Ent2			__GLOBALCOMMENTS__Test	User:Users2 does not have active Account: Users2 in Endpoint:A_Endpoint .
Users2	A_Endpoint	Users2	Add Access	memberOf	Ent3			__GLOBALCOMMENTS__Test	User:Users2 does not have active Account: Users2 in Endpoint:A_Endpoint .
Users3	A_Endpoint	Users3	Dynamic Attribute	AccessType	All			__GLOBALCOMMENTS__Test	User:Users3 does not have account in the Endpoint: A_Endpoint
Users3	A_Endpoint	Users3	Add Access	memberOf	Ent1			__GLOBALCOMMENTS__Test	User:Users3 does not have active Account: Users3 in Endpoint:A_Endpoint .
Users3	A_Endpoint	Users3	Add Access	memberOf	Ent2			__GLOBALCOMMENTS__Test	User:Users3 does not have active Account: Users3 in Endpoint:A_Endpoint .
Users3	A_Endpoint	Users3	Add Access	memberOf	Ent3			__GLOBALCOMMENTS__Test	User:Users3 does not have active Account: Users3 in Endpoint:A_Endpoint .

[rushikeshvartak]

Does endpointname is correct ? and its not Endpoint display name ?

[Akilan]

Hi @rushikeshvartak ,

Yes, endpoint name is correct not Endpoint display name.

[rushikeshvartak]

What is account name rule for app ?

Please share logs

[Akilan]

This is AD based child application. There is no separate account name rule configuration in endpoint level. we have configured in AD connection level in Account name rule json. 

CN=${user.username.toLowerCase()},${if(user.customproperty4.equals('A') && user.employeeType.equals('B')){'OU=C_Users,OU=Test Users,DC=test,DC=com'} else {'OU=test Users,DC=test,DC=com'}}

[rushikeshvartak]

Account name rule in endpoint parent and child is same?

[Akilan]

yes same

[rushikeshvartak]

Share logs in file

[Akilan]

Hi @rushikeshvartak ,

PFA the Log details.

[rushikeshvartak]

ENTTYPEREQUIRED:[Groups]

• Validate Entitlement Type name 
• Validate entitlement name is correct.
• validate if this is wokring for non ad application  

[Akilan]

Hi @rushikeshvartak ,

We have tested with Non-AD Application its not working and Entitlement type name  & Entitlement name is correct. 
We are using dynamic attribute this will impact multi users request??

[rushikeshvartak]

If query are dynamic and it may cause issue. Validate from multi user UI