Thanks Prem , this helps.
My next ask is ,
I want to fetch only those Roles which are tagged to Organization and I checked Customer table wherein no Role information is being saved, which I provided during Organization creation.
Based on Role I want to fetch corresponding organization type and
Based on Role + Organization Type I need to load Organizations and
Based on Role + Organization Type + Organization I need to load Entitlements 🙂
So what Action String i should mention ? Can you share screenshot of DA please.
Also if requestor is not selecting anything from any Dynamic Attribute requester can select any entitlement which does not belong to above combination then 1st Approval will be general supervisor and second approval will be App Team Approval. I am working on workflow implementation parallelly.
Kindly guide. Many Thanks in Advance.
Best Regards
Shraddha Rahate
Hi @Shraddha ,
Please find the below complete solution for your request form -
Q. I want to fetch only those Roles which are tagged to Organization and I checked Customer table wherein no Role information is being saved, which I provided during Organization creation
- Roles tagged under the organization are present in the table customer_roles
Run the below Query:
select
(select ROLE_NAME from roles where ROLEKEY=cr.CUSTOMERKEY) as 'Role Name',
(select CUSTOMERNAME from customer where CUSTOMERKEY=cr.CUSTOMERKEY) as 'Org Name'
from
customer_roles cr
Q. Based on Role I want to fetch corresponding organization type and
- In Role dynamic attribute (DA1), assuming you are using simple single select query to fetch all roles:
select ROLE_NAME as id from roles
- In Org Type dynamic attribute (DA2), use single select query where values are configured inside customer table for any customproperty value:
select c.customproperty1 as id from customer c,customer_roles cr, roles r where c.CUSTOMERKEY=cr.CUSTOMERKEY and cr.ROLEKEY=r.ROLEKEY and ROLE_NAME in (${a})
Q. Based on Role + Organization Type I need to load Organizations and
This can't be achievable. Check this article for reference - https://forums.saviynt.com/t5/identity-governance/multiple-attributes-support-in-parent-attribute-se...
- Workaround would be: you can concat both organisation and organisation type together in one Dynamic attribute (DA2)
select distinct concat(c.customername,' - ',c.customproperty1) as id from customer c,customer_roles cr, roles r where c.CUSTOMERKEY=cr.CUSTOMERKEY and cr.ROLEKEY=r.ROLEKEY and ROLE_NAME in (${role})
Preview:
Q. Based on Role + Organization Type + Organization I need to load Entitlements
So what Action String i should mention ? Can you share screenshot of DA please.
Use 'Config for Requestable Entitlement in ARS' option from entitlement type
Syntax: ev.entitlement_value=concat('${role}','_',substring_index('${orgtype}','-',1))
Q. Also if requestor is not selecting anything from any Dynamic Attribute requester can select any entitlement which does not belong to above combination
- Introduce a new mandatory dynamic attribute (DA0) example 'Select the role and organisation' with value 'Yes/No'.
- Based on this you can display DA1 and DA2 for the selection DA0 as 'No'
- If Yes, show DA1 and DA2.
- For this kind of setup, the 'Config for Requestable Entitlement in ARS' option from entitlement type will also change
- Sample: (('${DA0}'='No' and 1=1) or ('${DA0}'='Yes' and ev.customproperty10=concat('${role}','_',substring_index('${orgtype}','-',1))))
Your original request is on request form. For workflow, please raise another request as it will help other engineers with similar use-case to find the solution quickly.
Please select Accept As Solution and give Kudos if this solution helps you!
