Separate Auto/Manager approval workflow for JIT and Cred/Credless PAM requests

[Nagendra]

Hi Team,

How to setup auto approval workflow for JIT access and manager approval workflow for Cred/Credless PAM requests. In the security system adding manager approval flow to "Emergency Access ID Request Workflow" results in manager approval flow for both JIT and Credless. Is there any way to separate auto/manager approval for both JIT and Cred/Credless PAM requests ?

[NageshK]

@Nagendra Thanks for posting your question. This can be achieved through workflow. You can create a workflow as given below and it will auto approve JIT requests while sending shared acct requests to manager approval. I have tried this in latest version of the product and it worked fine.  

 Thanks

Nagesh K

[jdfranco]

Thank you @NageshK , it was a partial success. It only works for the JIT auto approval, it is not working for the manager approval. While raising the request itself, the request is not being submitted.

I have tried the following as a work flow condition, it is working for both cases:

com.saviynt.ecm.workflow.Request_Access.get(new Long(requestaccesskey))?.comments.matches('.*JIT Launcher.*')

It is taking the business justification of the request, but not the comment section. Can you suggest an attribute for the comment on the request?