route role request to entitlement owner

[dkumar]

Hi,

Is it possible to route the approval to individual entitlement owners of different entitlements present in a role instead of the role owner in an approval workflow when the user is requesting an enterprise role?

Also tried this with different access types and other variations but it only routes to the admin user and not the entitlement owners. Is this possible to achieve?

Also, is it possible to combine 1 or more enterprise roles into a single one, and make it requestable from ARS? 

Thanks for any help,

Deepak

[rushikeshvartak · Accepted solution]

Yes you can use access approval block

com.saviynt.ecm.workflow.Request_Access.get(new Long(requestaccesskey)).accesstype == 2
language - groovy

[dkumar]

Sure, I was also working on the below query :

select userkey from users where userkey in (SELECT eo.userkey FROM entitlement_owners eo, ars_requests ar, request_access ra WHERE ar.REQUESTKEY= ra.REQUESTKEY and ar.requestkey=${ARSREQUEST.id} and eo.entitlement_valuekey=ra.accesskey and ra.accesstype = 2 and eo.rank = 1)

But it only routes to the admin user and not the entitlement owners. Can you please provide a working query?

Also, can you confirm how can we combine 2 enterprise roles into one?

[rushikeshvartak]

Check above access approval logic instead of custom query

[dkumar]

Hi,

the workflow provided by you is not fully visible. Can you please provide the complete workflow?

[rushikeshvartak]

Create if else block condition provided as above post 

if true send to access approval else other flow

[rushikeshvartak]

Query worked?

[dkumar]

Yes it worked, Thanks

[Prashant]

Yes it,s  possible to route the approval to individual entitlement owners of different entitlements with the help of logical application integration .

In that under AD connection you need to  add the entitlement_filter with the multiple entitlement. Then you need to choose the TYPETWO option in the newly created Endpoint and then do the remaining changes at the entitlement level where you need to set the customproperty 14 to YES 

In the workflow you can add the access approval tab for entitlement owner approval .

Thanks 

[dgandhi]

What would be the reason for this use case? As role can have multiple entitlements into it, so it is better to assign it to the role owner.