Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Workflow issue - Requestor(Beneficiary) is SOD risk owner

shivmano
Regular Contributor III
Regular Contributor III

Hi Team - 

I am currently using the below custom assignment query to send approval to SOD risk owner for requests where there is SOD conflict identified. This is working as expected but when the Requestor(Beneficiary) is the SOD risk owner, then the request is getting assigned to IAM admin user. Can someone please advise how this can be handled. I would like for this to be autoapproved. 

select u.userkey
from request_exceptions RE INNER JOIN riskowners RO ON RO.RISKID=RE.EXCEPTIONKEY
INNER JOIN Users U ON U.userkey=RO.OWNERUSERKEY
where RE.REQUESTKEY=${ARSREQUEST.id}

shivmano_0-1727777147045.png

I have tried to use the below customquery but still the request is getting assigned to Admin when requestor is the risk owner

SELECT u.userkey
FROM
users u
WHERE
CASE WHEN
EXISTS (select us.userkey from request_exceptions RE INNER JOIN riskowners RO ON RO.RISKID=RE.EXCEPTIONKEY INNER JOIN Users us ON us.userkey=RO.OWNERUSERKEY where RE.REQUESTKEY=${ARSREQUEST.id} and us.userkey = ${requestedby.id})
THEN u.userkey = ${requestedby.id}
ELSE
u.userkey in (select us.userkey from request_exceptions RE INNER JOIN riskowners RO ON RO.RISKID=RE.EXCEPTIONKEY INNER JOIN Users us ON us.userkey=RO.OWNERUSERKEY where RE.REQUESTKEY=${ARSREQUEST.id})
END

 

Thank you

0 REPLIES 0