Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Sending Userkey/Username to Analytics Query

Shravan
New Contributor
New Contributor

Hi Team,


We are trying to implement Account Visibility in ARS based on user entitlements.
if user is part of platform Admin or OS Admin we would like to display them Administrator/root accounts.

but while trying to pass userkey its not allowing.

below is the query.

select acc.accountkey as 'id', acc.name as 'name' from accounts acc where acc.endpointkey = 1344 and acc.accountconfig like '%\"pamState\"%ENABLED%' AND acc.name like 'cpamuser%';
union
select acc.accountkey as 'id', acc.name as 'name' from accounts acc where acc.endpointkey = 1344 and acc.accountconfig like '%\"pamState\"%ENABLED%' AND EXISTS (select 1 from users u ,user_accounts ua, account_entitlements1 ae1, accounts ac WHERE u.userkey = ua.userkey and u.statuskey = 1 and ua.accountkey = ac.accountkey and ae1.accountkey = ac.accountkey and ae1.entitlement_valuekey IN (8920781,8920789, 8920752) and u.userkey = ${userkey}) and acc.name in ('Administrator','root');

Couldyou please suggest how can we pass userkey to Analytical Query.

 

Regards,
Shravan

3 REPLIES 3

rushikeshvartak
All-Star
All-Star

what is link between ARS & Analytics here ?


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Above query is defined in Analytics PAMDefaultUserAccountAccessControl
we have updated pam_Config in AWS connection as below
{
"column": "customproperty43",
"value": "PAMDefaultUserAccountAccessControl",
"feature": "accountVisibilityControl"
}
 
while bootstraping AWS instances, Endpoint CP43 will be updated with Analytics name
And Accounts in ARS page will be showing as per Analytics 'PAMDefaultUserAccountAccessControl'

@Shravan : Userkey is not supported variable in Account Visibility control analytics. Only supported variables as of now are username and endpointkey. So modify your query accordingly


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.