Restriction for " Whom to Request " in SAV Role

[Puspanjali]

Hi Team,

We have 2 kinds of employees PERMANENT and EXTERNAL

We created a role called "ROLE _MANAGER"

We want to restrict this manager role " Whom to Request " to only external accounts for whom the request is a manager 

This is the query we are using

select a from Users a where a.statuskey=1 and a.manager=${users.id} and a.employeeType = 'External'

Can Team help me to improve the query so that manager can only request external accounts?

[KirtiAjrot]

Please try with the below: 

select a.id from Users a where a.statuskey=1 and a.manager='${users.id}' and a.employeeType = 'External'

[Puspanjali]

Hi Kirti

Your suggested query did not help.

Managers can still request PERMANENT employees, which were assigned to them.

[rushikeshvartak · Accepted solution]

How many sav roles user have?

use json instead of hql

https://forums.saviynt.com/t5/did-you-know/did-you-know-you-can-filter-who-can-request-view-approve-...

[sk]

Can you confirm that manager has only ROLE_MANAGER? If not make sure that other SAV ROLES are not having any conflicting configuration.

If user has only Manager SAV Role then can you try to change the query like below

select a from Users a where a.statuskey=1 and a.manager=${user?.id} and a.employeeType = 'External'