Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.
No ratings
SB
Saviynt Employee
Saviynt Employee

Use Case

We have 2 Technical rules with Different condition values for the same attribute. When condition 1 matches, Entitlement/Group A should be assigned. 

When the condition of the attribute defined in Rule changes, 2nd Tech Rule should be triggered. Entitlement/Group B should be assigned to the user and Remove access task should be submitted for Entitlement/Group A.

Pre-requisites

Detective option should be selected in the Technical Rule

Applicable Version(s)

ALL

Solution

We need to schedule a 'DetectiveProvisioningRulesJob' to ensure the Access can be removed in case the condition fails. You must create a job and schedule it.

ADMIN > Job Control Panel > Utility > Run Detective Rules and Take Action (DetectiveProvisioningRulesJob).

For Execute rules option, select 'Detective Technical Rules'


And for the Technical Rule Filter Query(HQL) you can define the value as hr.id=295


Here 295 is the id (HANARULEKEY) of the technical rule and in order to find this id value, you can use the below query in Data analyzer.

select HANARULEKEY from hanarule where NAME='Tech Rule Name'

sahil_1-1687280783580.png

 

Version history
Last update:
‎06/26/2023 10:02 AM
Updated by:
Saviynt Employee
Contributors