Task creation Post All Approvals Are Completed in Parallel Workflow

[NM]

Hi Team,

We have a use case where in the workflow we need to have different approval for new account and entitlement addition. We are using entitlementvalue variable in the if else condition to redirect to the desired approval(working completely fine).

Issue - Whenever user raised a request for account and entitlement(in one request) and when approval reject the new account request, for new account approval it shows request rejected but "request still stays in pending state" and internally for new account it says "access pending"

We are ending the request when separate new account request is rejected. made the changes by taking reference from below link

How to configure All Approval Workflow to create t... - Saviynt Forums - 28987

[rushikeshvartak]

Its just UI display issue. What is status of request on ars_requests table?

you can try using Gen 2 Ui.

[NM]

Hi Rushikesh,

It is "1" and even when i try to raise a new request for same user Saviynt doesn't allow me.

FYI This issue doesn't seem to happen when we only raise an account creating request and reject it.

[rushikeshvartak]

Then you have issue in workflow. Please share xml of workflow

[NM]

client VDI access couldn't add, If you have, could you please provide any sample workflow?

Java "grant access" and "reject account" method points to "END request" and reject access to "all approval complete check", Made changes as per the below doc

How to configure All Approval Workflow to create t... - Saviynt Forums - 28987

Thanks

[rushikeshvartak]

Provide screenshot

[NM]

Hi Rushikesh,

workflow screenshot (we will be using different email template for account reject so used a different reject block)

Thanks

[rushikeshvartak]

Since this are xml level changes need xml , click on top right corner and provide same

[rushikeshvartak]

There should be only one end block in workflow 

[NM]

Yes, was trying out few things to get the desired result, Requestaccess table shows rejected for entitlement but not for new account request.

Workflow txt file attached (same workflow xml configured in internal environment.)

[rushikeshvartak]

Make account auto approve & apply entitlements only under security system - create task action

[NM]

As per the requirement we need to have a separate approval for create account.

[rushikeshvartak]

What is workflow type ?

is it parrllel

[NM]

yes, parallel workflow..

[rushikeshvartak]

Add if condition before account check

Since both account and entitlement objects follow the same flow in your workflow and accounts do not have any owners, it move to admin approval by default.

To segregate the account and entitlement flows in the same workflow, use an if-else condition like:
entitlement!=null

Sample Workflow Node

[NM]

Account and entitlement separation are already added, and approval goes to the correct person/separate person for entitlement and account, It is just when we reject both the request (account and entitlement) request still stays in pending status.

[rushikeshvartak]

Change below 

<java class="com.saviynt.workflowmgt.rejectaccess"
method="denyAccess" name="account reject">
<arg>
<object expr="#{requestaccesskey}"/>
</arg>
<transition to="All Approvals Complete Check"/>
</java>

[NM]

This should make the workflow work similar like serial, but our main concern was, as the approval for account and entitlement is different if the approver rejects the account, it should end the request that is why me used "End request" for account reject.

if we make account reject "All Approvals Complete Check" then if account is rejected and entitlement is approved it will create a add access task for entitlement which will be of no use.

[rushikeshvartak]

Thats purpose of all approvals check. To wait until all approvals are completed. Approving entitlement without account is not making sense and it will not create task as account is not approved 

[NM]

yes..Understood but I am emphasizing on the case when entitlement was approved by the owner but not account because we have separate approval configured. in that case when all approver action is taken entitlement/add access task will be generated which will just error out as no account is created. we are trying to end the request if account is rejected so no task gets generated.

[rushikeshvartak]

This can’t be achieved both account and access should be go together for approval. In workflow you can’t check if account accepted or rejected

[NM]

Anything that can be done on XML end? Have configured two different reject block for entitlement and account and account reject to "end request"

<java class="com.saviynt.workflowmgt.rejectaccess"
method="denyAccess" name="account reject">
<arg>
<object expr="#{requestaccesskey}"/>
</arg>
<transition to="End Request"/>
</java>

but request doesn't move to complete state and stays in pending..

[rushikeshvartak]

Change end request to all approvals check