Showcasing only Selected Accounts for a User within an Application

[Mahak_Acharya]

Hi Team,

We have a usecase where a user has 3 different accounts in a single endpoint, all of which are tagged to the User. The user should be able to view only 2 of those 3 accounts while requesting using the ARS form for the endpoint.

Usecase Description:

User with Username 23456 has 3 accounts associated to it in Application- TestApp

AccountName1: CN=ABC,OU=OU1

AccountName2: CN=DEF,OU=OU2

AccountName3 CN=GHI,OU=OU3

While requesting for access, on the step where we choose the account to be modified, is there a way to display accounts belonging to only OU1 and OU2, i.e show only AccountName1 and AccountName2 in the pop-up. Account3 should not be displayed in the account selection screen.

Kindly let us know if there is a way to achieve this usecase.

[rushikeshvartak]

Saviynt doesn't have filter on modify account request. 

Workaround :

Create Dynamic attribute on Update Account only & apply your logic

2. You can map account to admin user ( if that account is never going to be requested) 

[Mahak_Acharya]

Thank you for your reply!.

Is there a way i can associate the value chosen from the DA to the Account Name attribute in the request. i.e the accountname,  the request is being raised for should be same as the value i select in the DA

[rushikeshvartak]

No its not feasible. However in connected application you can create accountname with dynamic attribute value but it will  create confusion as request history show different account name where as actual account name is different

[sahajranajee]

@Mahak_Acharya 

There is no filter available for the same endpoint. You can accommodate a dynamic attribute to validate which account has been requested for modification and based on that you can apply Dynamic attribute show hide to prevent any attributes being shown on modification page.

Similarly the dynamic attribute can be used with entitlement query to not show any entitlements for request. 


DA could provide a value like 1 or 0. 
Based on this you could hide your remaining Dynamic attributes. Also you could build your entitlmeent query like : and ${AccountCheckerDA}=1 .

When 1=1, then you see the entitlements for request.

[Mahak_Acharya]

Thank you for your reply!.

Is there a way i can associate the value chosen from the DA to the Account Name attribute in the request. i.e the accountname,  the request is being raised for should be same as the value i select in the DA