PARTNERS - Please join us for our upcoming webinar:
Leveraging Intelligent Recommendations for Operational Transformation.
AMS Partners Click HERE | EMEA/APJ Click HERE

REST Connector - AddAccess JSON

Rajatlm10
New Contributor III
New Contributor III

Hi, 

I am using the below JSON for addAccess for REST connector. 

{
"call": [
{
"name": "Role",
"connection": "acctAuth",
"url": "https://xyz/profile/v4/Users/${account.customproperty5}",
"httpMethod": "PATCH",
"httpParams": "{\"schemas\":[\"urn:ietf:params:scim:api:messages:2.0:PatchOp\"],\"Operations\":[{\"op\": \"add\",\"path\":\"urn:ietf:params:scim:schemas:extension:spend:2.0:Role:roles\",\"value\": [{\"roleName\":\"${dynamicAttributes.get('Rolename')\",\"rolesGroup\":\"${entitlement_values.customproperty1}\"}]}]}",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json"
},
"httpContentType": "application/json",
"successResponses": {
"statusCode": [
200,
201
]
}
}
]
}

is it the right syntax for addAccess JSON ? as i am not getting any error in the logs. 

 

Also, The entitlement value is stored in CP1 but its not getting picked up in logs. i have tried with dynamicAttributes.get and requestAccessAttributes.get and in both cases value is not getting picked up. 

 

Can anyone help me on this ?

 

 

9 REPLIES 9

rushikeshvartak
All-Star
All-Star

${task?.entitlementValueKey?.customproperty1}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Rajatlm10
New Contributor III
New Contributor III

@rushikeshvartak 

Rajatlm10_0-1718110326708.png

Still, it shows "Austria" but actual value in AT-480 (in CP1), Austria is the user-friendly name which we are using in the access form. 

${arsTasks?.entitlementValueKey?.customproperty1}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Rajatlm10
New Contributor III
New Contributor III

no its still not working. 

${entitlementValuesObj.customproperty1}


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Rajatlm10
New Contributor III
New Contributor III

@rushikeshvartak its still not working. 

otherway around i am trying to work it out via if else. like If ent value is x then abc. 

i am using the below query. 

Rajatlm10_2-1718725949514.png

 

just want to validate is the rightway to pick the ent. value ? because in logs i can't see the real value i.e. the country code. 

Rajatlm10_1-1718725891167.png

 

Refer https://forums.saviynt.com/t5/identity-governance/if-else-rest-connector-json/m-p/100315#M65882 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Rajatlm10
New Contributor III
New Contributor III

@rushikeshvartak 

Rajatlm10_0-1718800760717.png

The pending tasks are getting completed but when i check the API call status it says INVALID VALUE. 

I have tried with dynamicAttributes.get and requestAccessAttributes.get to get the value of dynamic attribute and used if else to map the values. 

 

Is there any other way i can do this use case ?

 

What is name of attribute? Are you storing value in account columns ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.