Workflow: Request to be auto approved if entitlement owner requests for it.

[Kaustubh]

We have a requirement as follows:
If entitlement owner requests for the entitlement, the request should get auto approved.

If requestor is not entitlement owner, the request should be routed to manager for approval.

I found below query on forum but it is not working for me:

role.ownerRank1.contains(requestedby.username)

Solved: Workflow: Check if App Role Owner is submitting th... - Saviynt Forums - 20679

Tried other queries too but no help

(com.saviynt.ecm.identitywarehouse.domain.Entitlement_values.executeQuery("SELECT count(*) FROM Entitlement_values ev,Entitlementowners eo WHERE ev.id=eo.id and ev.rank=1 and ev.entitlement_Value='${entitlement.entitlement_Value}' ").size()!=1)

entitlement.getOwnerRank1().

entitlement.allowner.contains(requestedby.username)

entitlement.allowner.contains(user.username)

The workflow I have created is :

While I submit the request, I get error as

[Raghu]

Use below try

entitlement.getOwnerRank1().contains(requestedby.username) eq true

[Kaustubh]

Tried but same error 'Request not Submitted. Please contact your administrator.'

[Raghu]

directly enttiltment it wont get u need specify application

use like

[Kaustubh]

I tried but same issue

[Saathvik]

@Kaustubh : Are you trying to validate the Application Role Owner or Entitlement Owner. If Application Role Owner then use below condition

role.ownerRank1.contains(requestedby.username)

If it is Entitlement Owner then use below condition

entitlement.getOwnerRank1().contains(requestedby.username) eq true   

And make sure that you didn't select groovy as expression language

[Kaustubh]

@Saathvik @Raghu :

Yes.

The use case is for Entitlement owner, and I have not selected any expression language now but same error 'Request not submitted. Contact your administrator'.

[rushikeshvartak]

Change language to groovy 

[Raghu]

yes if using roles then use below condition insteadof entilemnt

role.ownerRank1.contains(requestedby.username)

 and same workflow try it

[rushikeshvartak]

Please share workflow zip

[Kaustubh]

@rushikeshvartak 

When I am trying to submit a request as an entitlement owner, I am getting an error message 'Request not submitted. Contact your administrator'.

The request should be auto approved if entitlement owner is submitting a request else it should be router to manager for approval.

[Saathvik]

@Kaustubh :  Can you please share the logs when you are getting the error? Also without Entitlement Owner check if-else block were you able to submit the request?

[Kaustubh]

With this current workflow, I am able to submit the request. But in this case, I have raised a request for one user already having an account and I am entitlement owner of rank 1. I want the request should be auto approved since the entitlement owner has raised the request, but it is going to the manager for approval.

[Saathvik · Accepted solution]

@Kaustubh : Change owner check condition as below

entitlement.getOwnerRank1().contains(requestedby.username) eq true or entitlement.getOwnerRank1().contains(user.username) eq true

[Raghu]

@Kaustubh can remove all just give start and grant access and end

and try to submit the request or not check it ? get logs 

[Kaustubh]

I tried and the request is approved.

[rushikeshvartak]

Requestor is Entitlement owner or End user is entitlement owner

[Kaustubh]

Requestor is entitlement owner requesting on behalf of end user.

[Kaustubh]

@rushikeshvartak @Saathvik 

When requestor: entitlement owner

beneficiary: end user

If entitlement owner selects multiple entitlements for which he is not the owner along with the one for which he is the owner, then the other entitlements request should be routed to respective entitlement owners. Currently other entitlements are routed to manager for approval.

[rushikeshvartak]

You can modify workflow based on sugesstion and prepare table and test all use case

Requestor	End User	Entitlement 1 Owner	Expected behaviour	Ent 2 Owner
Rushi	Kaustubh	Rushi	Auto Approve	N/a

[Kaustubh]

requestor	end user	entitlements	expected behaviour
Rushi	Kaustubh	ent1, ent2	ent1 auto approved. Ent 2 router for ent owner approval
Rushi	Kaustubh	ent2	Ent2 routed for ent2 owner approval

Here Rushi is owner for entitlement 1

[Saathvik]

@Kaustubh : If requestor is owner of any entitlement in system you need that to be sent it to entitlement owner instead of manager? 

If requestor is not entitlement owner then you still need it to be routed to manager instead of owner?

[Kaustubh]

Kaustubh is owner of entitlement1, Saathvik is owner of entitlement2.

Kaustubh submits a request for user with entitlement1 and entitlement2. 

Entitlement1 should be auto approved while entitlement2 should be routed to Saathvik for approval.

Can we do this?

[rushikeshvartak]

Each reply your requirement are changing. Now you are ask is Entitlement owner instead of manager ?

[Saathvik]

@Kaustubh: Okay can you also explain below scenarios in the same example you gave.

1. What if Kaustubh is not owner of any entitlement but he is submitting request, then in that case what is your expected flow?
2. What if Kaustubh is owner of entitlement3 but submitting request for user with entitlement1 and entitlement2 then what is the your expected flow?

[Kaustubh]

For both of the scenarios mentioned by you, same flow is expected:

As Kaustubh is not the owner of any entitlements submitted in the request, the account request route to Manager and entitlement request to respective entitlement owner.

[Saathvik]

@Kaustubh : I don't think it is possible to achieve all your scenarios. Either you keep your manager approval as first level for all scenarios and then auto approve the request at 2nd level if requestor is owner of entitlement otherwise goes through respective entitlement owner. 

OR

Request will be auto approved for entitlement where requestor is owner otherwise whatever flow you want (Either manager + entitlement owner or just manager or just entitlement owner) will be applied for all else scenarios.

[rushikeshvartak]

You need to have manager as well entitlement owner in workflow