Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Workflow is getting stuck at first level of approval

User11
New Contributor III
New Contributor III

Hello team,

We are currently facing an issue with the first level of approval in our two-step workflow.

  1. The user's manager is 1st approval. (If request submitted by the manager, this step should auto approve)
  2. ABC Group is the 2nd approval

However, we have noticed that the workflow is getting stuck at the first level and is not progressing to the second level of approval by the ABC Group.

We have created two workflows, and I have attached a screenshot of the first workflow (workflow_1). Could you please take a look and help us identify the issue?

User11_0-1719593661123.png

 

Additionally, I would appreciate it if you could also share the screenshot of the second workflow (workflow_2) for further testing.

 

User11_1-1719593661143.png

 

 

18 REPLIES 18

rushikeshvartak
All-Star
All-Star

Please share logs after request submission.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hello @rushikeshvartak  , unfortunately logs can’t be shared. 

But we did perform testing for first workflow (workflow_1)

We recently submitted Request in Saviynt for the new security system.

The approval workflow functioned as expected for approvals. 

 

We tested the process for rejections.

In a specific case with Request ID was rejected at the manager approval stage, and the rejection was successful.

 

In another case the manager accepted the account but rejected the group. However, the task was still sent to ABC group. Ideally, if the manager rejects either the account or the task, the workflow should end at that point. This same principle should apply to ABC group as well.

 

For (workflow_2) 

The manager rejection is indeed stopping the workflow, which is working correctly.

However, it seems that the workflow is getting stuck when the manager approves.

Thanks,

In custom assignment block

  • select user field should be custom query and not user group
  • as you are using query

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi @rushikeshvartak , Thanks for the help

After testing multiple scenarios to test the workflow, we have narrowed down the possible customization query. Based on the data below, when a user requests a new account and group, the following should occur:

  1. The new account should be automatically approved.
  2. The entitlement access should be sent to the ABC group for approval.
  3. If the group owner rejects the request, the workflow should end without generating any pending tasks.

Regards,

Sakshi

great

Please click the 'Accept As Solution' button on the reply (or replies) that best answered your original question and hit 'Kudos' button 👍.


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

User11
New Contributor III
New Contributor III

Can anyone help us on this ?

What is issue ?


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

User11
New Contributor III
New Contributor III

We need help in customize workflow query. Based on the data below, when a user requests a new account and group, the following should occur:

  1. The new account should be automatically approved.
  2. The entitlement access should be sent to the ABC group for approval.
  3. If the group owner rejects the request, the workflow should end without generating any pending tasks.

#1 Refer https://forums.saviynt.com/t5/saviynt-knowledge-base/how-to-configure-all-approval-workflow-to-creat...

#2 add below if condition entitlement !=null -- true then custom Assignment block 

#3 same as #1 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Hi @rushikeshvartak 

Not able to access the page 

User11_0-1721373143765.png

 

 

Updated Link https://forums.saviynt.com/t5/saviynt-knowledge-base/how-to-configure-all-approval-workflow-to-creat... 

Query :

select userkey from user_groups ug join usergroup_users ugu on ugu.USER_GROUPKEY = ug.USERGROUPKEY and user_groupname=concat('${users.userType}', 'Group')

rushikeshvartak_0-1721437088857.png

 

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

PremMahadikar
All-Star
All-Star

Hi @User11 ,

1. The new account should be automatically approved.

You can use below condition to detect new account and send it for separate block

ars_requests.requesttype == 3 and entitlement.entitlement_value == null

2. The entitlement access should be sent to the ABC group for approval.

Further to the above if else block, route it to custom assignment block - user group 

Use this article as reference - Solved: Workflow Custom assignment to usersgroup - Saviynt Forums - 102771

3. If the group owner rejects the request, the workflow should end without generating any pending tasks.

Do refer the link which @Rushi shared: How to configure All Approval Workflow to create t... - Saviynt Forums - 28987

 

If this helps your question, please consider selecting Accept As Solution and hit Kudos

User11
New Contributor III
New Contributor III

Hi @PremMahadikar quick question regarding this Do refer the link which @Rushi shared: How to configure All Approval Workflow to create t... - Saviynt Forums - 28987 

How we can convert XML data into the workflow blocks ? is it possible ? if possible how can we achieve this ?

Regards,

Its not possible to convert back from xml to wiring. You need to manually perfom


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

PremMahadikar
All-Star
All-Star

@User11 ,

Once a workflow is converted to XML. We cannot bring it to workflow blocks!

 

User11
New Contributor III
New Contributor III

@rushikeshvartak and @PremMahadikar Thanks for the update  !

User11
New Contributor III
New Contributor III

Hi 

I am trying to acheive this

when a manager requests a new account and group, for a user  then following should occur:

  1. The new account should be automatically approved.
  2. The entitlement access should be sent to the ABC group for approval.
  3. If the group owner rejects the request, the workflow should end without generating any pending tasks.

I am encountering below error 

User11_0-1722606335156.png

User11_1-1722607072714.png

 

Manager- Accepted node is going to grant as well as custom assignment it can be either 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.