Application role dynamic attribute

[ant]

Is there a way to use dynamic attributes for an application role to control access requests based on employee type?

would need a point/guide on this.

[smitg]

Hi @ant ,

Application request access can be controlled via Endpoint > Roletype > Requested query

Kindly refer
https://forums.saviynt.com/t5/application-access-governance/queries-regarding-application-roles-requ...

Thanks,
Smitha

[ant]

Hi @smitg 

The  link you have you refered is not so helpful

Could you share a snippet query to use for a case, where we want Application role "A" is only visible to employeetype "X"

[Manu269]

Please create a DA at Endpoint.

> How to allow only certain users to view and request Application Roles in Saviynt?

Use below sample query :

r.status=1 and r.customproperty2 =${DynAttr}

where DynAttr - Dynamic attribute name

You can filter the roles based on this.

[RikuN]

We tried that query "r.status=1 and r.customproperty2 =${DynAttr}" modified for our case, but it didn't worked. For entitlements it works, but not for application roles.

Regards

Riku

[ant]

Hi @Manu269 ,

This seems to be the same as @smitg post.

Is there no documentation that shows or explains a guide to achieve this, other than all the wild guesses?  

[naveenss]

Hi @ant 

Did you try the below version?

r.status=1 and r.customproperty2 ='${DynAttr}'

[ant]

Hi @naveenss 

Yes we have tried both of this case and so far haven't worked.

r.status=1 and r.customproperty2 =${DynAttr} 

r.status=1 and r.customproperty2 ='${DynAttr}'

[naveenss]

@ant  Thanks for confirming. Do you see any error in logs?

[ant]

@naveenss 

Not sure what error you think should result, but we can see the Query that is being execute in the log 

[Darshanjain]

HI @ant 

As discussed, After updating the value Mapping in parent atrribute when changed column it did work but the value needs to be selected then form will be reloaded and then the roles are visible.

Thanks

Darshan

[rushikeshvartak]

• Create Dynamic attribute , since employee type will be constant keep same query in default value, also mention Mapping keyword
• in Endpoint --> Role Type --> Mention SQL query

There can be issue on first time change application roles won't be visible. then remove default query and try