Click HERE to see how Saviynt Intelligence is transforming the industry. |
06/26/2024 06:31 AM
Hi, I have a requirement to validate the usecase in workflow for approval/auto approval
step 1: the request should go for manager approval
step 2: workflow should check for
1.employetype=employee and
2.user departmentName matches with any one of the departmentname (CORE TECH SECURITY DEV US,AWAN ENGR US,MIST ENGINEERING US) and
3.user custom attribute has( Core Tech,Awan)
OR [ Above all 3 or below 1 condition should satisfy]
4. user belong to endpoint AD and has access to entitlements 'cn=java,XXX' or 'cn=python,XXX' group.
if above condition doesnot satisfy request should go to 2nd level approval else it should auto provision
06/26/2024 09:45 AM
use if-else block, below link for example:
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.
06/26/2024 11:02 AM
Refer below workflow.
((dynamicAttributes.get('isADACCESS') ne null) and (dynamicAttributes.get('isADACCESS') eq 'Yes')) |
For Requirement
user belong to endpoint AD and has access to entitlements 'cn=java,XXX' or 'cn=python,XXX' group.
Create dynamic attribute on request form /visible or hidden and based on it route workflow
user.employeetype eq 'employee' and ( user.departmentname eq 'CORE TECH SECURITY DEV US' OR user.departmentname eq 'AWAN ENGR US' OR user.departmentname eq 'MIST ENGINEERING US' ) and ( user.customproperty1 eq 'Core Tech' or user.customproperty1 eq 'Awan' ) |
06/27/2024 07:39 AM
Can you please help with query for dynamic attribute for below
For Requirement
user belong to endpoint AD and has access to entitlements 'cn=java,XXX' or 'cn=python,XXX' group.
Create dynamic attribute on request form /visible or hidden and based on it route workflow
06/27/2024 10:25 AM
select u.username,case when u.userkey='${requestee}' then 'Yes' else 'No' end as id from accounts a, endpoints e ,account_entitlements1 ae , entitlement_values ev ,user_accounts ua,users u where a.endpointkey=e.endpointkey and ae.entitlement_valuekey =ev.entitlement_valuekey and ae.accountkey=a.accountkey and ua.accountkey=a.accountkey and ua.userkey=u.userkey and e.endpointname='Saviynt' and ev.entitlement_value IN ('ROLE_ADMIN' ) and u.userkey='${requestee}'
07/01/2024 09:06 AM
Hi
In if else condition iam tying with the below query it and 2nd check is not working
working with only - user.employeeType.equalsIgnoreCase("Employee")
Not working if 2nd condition is defined - user.employeeType.equalsIgnoreCase("Employee") and user.departmentName.equalsIgnoreCase("IT SECURITY-1000")
07/01/2024 09:39 AM
user.employeeType.equalsIgnoreCase("Employee") AND user.departmentName.equalsIgnoreCase("IT SECURITY-1000")
07/01/2024 09:57 AM
tried that but second condition is not working
07/01/2024 10:03 AM
Provide workflow screenshot and logs
07/01/2024 10:15 AM
07/01/2024 10:41 AM
Nothing in logs related to 2114613 if any please point to line number
Screenshot is blur please provide better screenshot please
07/01/2024 10:44 AM
07/01/2024 10:49 AM
Use proper parathesis (brackets) for condition 1
07/01/2024 10:51 AM
Yes iam using the same
user.employeeType.equalsIgnoreCase("Employee") AND user.departmentName.equalsIgnoreCase("IT SECURITY-1000") AND user.customproperty18.equalsIgnorecase("IT Security AND Compliance")
07/01/2024 10:58 AM
(user.employeeType.equalsIgnoreCase("Employee") and user.departmentname.equalsIgnoreCase("IT SECURITY-1000") and user.customproperty18.equalsIgnorecase("IT Security AND Compliance"))
07/01/2024 11:00 AM
it did not work
07/01/2024 11:13 AM
Just keep user.departmentname.equalsIgnoreCase("IT SECURITY-1000") and validate flow
07/01/2024 11:21 AM
yes i tested that too only working condition is user.employeeType.equalsIgnoreCase("Employee").
If i define dynamic attribute as dynamicAttributes.get('departmentName') eq 'IT SECURITY-1000') it is working, when both the conditions are merged it is not working
(user.employeeType.equalsIgnoreCase("Employee") AND dynamicAttributes.get('departmentName')) eq 'IT SECURITY-1000')
07/01/2024 11:25 AM
It seems departmentname is not exposed.
You can create hidden dynamic attribute and use in workflow and enable below config
07/02/2024 07:37 AM
with my use case can you help with screenshots for creating hidden dynamic attribute
07/02/2024 11:21 AM
You have already created dynamic attribute make it hidden
select departmentname as id from users where userkey =${requestee}
07/02/2024 01:58 PM
Hidden DA option is also not working
(user.employeeType.equalsIgnoreCase("Employee") AND dynamicAttributes.get('departmentName') eq 'IT SECURITY-1000') AND dynamicAttributes.get('customproperty18') eq 'IT Security AND Compliance'))
07/02/2024 02:54 PM
What is your DA Name. Please share screenshot from request_access_attrs table
07/01/2024 10:56 AM
i tried the following too but did not work
(user.employeeType.equalsIgnoreCase("Employee") AND user.departmentName.equalsIgnoreCase("IT SECURITY-1000") AND user.customproperty18.equalsIgnorecase("IT Security AND Compliance"))