Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Restrict User Update task creation according to AD Account attribute

Shreya47
New Contributor III
New Contributor III

Hi Team,

We have some Users who will have more than 1 AD accounts. One of them will be considered as Primary account (with no Account Type) and others are considered as Secondary account for which we are updating the Account Type as 'Secondary'.

We don't want any update account task to be triggered for these Secondary accounts. 

Could you please suggest the best practice to restrict User Update task creation according to AD Account attribute (Account Type).

 

We tried modifying the updateaccountjson in AD connection as mentioned below, however this did not work:

${if (accounts.accounttype!='SECONDARY' || accounts.accounttype!='PRIVILEGED')
{
"givenName": "${user.firstname}",
"sn": "${user.lastname}",
"displayname": "${displayname}",
"cn": "${displayname}"
}
}

2 REPLIES 2

AmitM
Valued Contributor
Valued Contributor

Hi @Shreya47 ,

try something like 

${if(task.accountKey.accounttype == null){'\"givenName\":\"'+user.firstname+'\",\"givenName\":\"'+user.firstname+'\",\"sn\":\"'+user.lastname+'\",\"displayname\":\"'+user.displayname+'\",'} else {''}}

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.

 

rushikeshvartak
All-Star
All-Star

Please share logs


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.