Click HERE to see how Saviynt Intelligence is transforming the industry. |
02/22/2024 05:07 PM
Hello,
We have a scenario wherein we'd like to exclude updating of AD Mail attribute value to some users.
For instance, if the user's username is 'ABCDEF', we wish to retain the current value assigned to "mail", allowing updates to the other AD attribute values. On the other hand, if the user?.username is not equal to 'ABCDEF', the "mail" attribute value will be constructed by concatenating user?.customproperty31 and the domain.
Is it feasible to achieve this within the UpdateAccountJSON, or is the exclusion limited to the Advanced Query (SQL) section of the Provisioning Job, where we would prevent the Update Account task for the user?
02/22/2024 07:04 PM
You can update json with if else logic to retain
Sample Logic :
"Department":"${if((account.customproperty7 === null ? '' : account.customproperty7) === Department)(SAVIYNTNOTCHANGED) else (Department)}"
02/23/2024 01:36 AM
Hi @mgandr ,
This forum can help - https://forums.saviynt.com/t5/identity-governance/dont-provision-a-specific-attribute-if-dynamic-att...
As your use case is also update account. SAVIYNTNOTCHANGED will work.
Thanks, Amit
02/25/2024 07:40 PM
I've tried the below but it doesn't seem to work and I'm getting this error No such property: customproperty24 for class: java.lang.String
"mail": "${if(account?.customproperty24.contains('ABC.com'))(SAVIYNTNOTCHANGED) else {user?.customproperty31 + Domain}}"
02/25/2024 08:12 PM - edited 02/25/2024 08:13 PM
validate if name is exposed
"mail": "${if(account?.name.contains('ABC.com'))(SAVIYNTNOTCHANGED) else {user?.customproperty31 + Domain}}"
or
"mail": "${account?.customproperty24?.contains('ABC.com') ? 'SAVIYNTNOTCHANGED' : (user?.customproperty31 ?: '') + 'Domain'}"
02/27/2024 07:19 PM - edited 02/27/2024 07:25 PM
It didn't work too.
"mail": "${account?.customproperty24?.contains('ABC.com') ? 'SAVIYNTNOTCHANGED' : (user?.customproperty31 ?: '') + 'Domain'}"
Error: No such property: customproperty24 for class: java.lang.String
"mail": "${if(account?.name == 'abc.def')(SAVIYNTNOTCHANGED) else {user?.customproperty31 + Domain}}"
Error: No such property: name for class: java.lang.String
"mail": "${if(user?.username == 'ABC')(SAVIYNTNOTCHANGED) else {user?.customproperty31 + Domain}}"
Error: No such property: SAVIYNTNOTCHANGED for class: SimpleTemplateScript43999
02/27/2024 07:45 PM
SAVIYNTNOTCHANGED not works with SAP Connector only