Using Account Attribute as condition User Update Rule

[Shreya47]

Hi Team,

We were using Users table attributes in the Condition field for User Update Rule. However, along with users attributes we wanted to check if the certain Account attribute is updated with some static value to trigger the User Update Rule. 

For example: If Account Type is not equal to "Admin" then proceed with the required Actions.

Could you please confirm if we can include account attributes along with user attributes in the conditions field for User update Rule.

[AmitM]

HI @Shreya47 , yes you can use Account tables in user update rule. Here is one sample that I used :

a.customproperty2 not in (select acc.customproperty3 from Accounts acc, User_accounts ua, Users u, Endpoints e where acc.id=ua.accountkey and ua.userkey=u.id and acc.endpointkey=e.id and e.endpointname='abc' and acc.customproperty3 is not null)

This doc will help as well - https://docs.saviyntcloud.com/bundle/KBAs/page/Content/Obtaining-the-attribute-details-from-tables-o...

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.

[rushikeshvartak]

Refer https://forums.saviynt.com/t5/saviynt-knowledge-base/advanced-usage-of-eic-identity-objects-in-provi...

Sample 

Sample query

a.statuskey=1 and a.id in (select distinct us.userkey from User_accounts us, Accounts ac, Account_entitlements1 ae1, Entitlement_values ev where us.accountkey = ac.id and ac.id = ae1.accountkey and ae1.entitlement_valuekey = ev.id and ev.entitlement_value like '%Entitlement value%' and ac.status = 1 and ac.endpointkey = endpoint key)

[Shreya47]

Hi All,
We have some Users who will have more than 1 AD accounts (same endpoint). One of them will be considered as Primary account (with no Account Type) and others are considered as Secondary account for which we are updating the Account Type as 'Secondary'. We don't want any update account task to be triggered for these Secondary accounts, it should only trigger for the primary account.

We updated the USER UPDATE RULE as below, but this rule is not getting triggered whenever we change any of the below user attribute.

a.statuskey=1 AND (##a.firstname isupdated##) OR (##a.lastname isupdated##) OR (##a.manager isupdated##) OR (##a.departmentname isupdated##) OR (##a.title isupdated##) OR (##a.companyname isupdated##) OR (##a.state isupdated##) OR (##a.secondaryPhone isupdated##) OR (##a.street isupdated##) OR (##a.customproperty10 isupdated##) OR (##a.customproperty12 isupdated##) OR (##a.region isupdated##) OR (##a.enddate isupdated##) OR (##a.displayname isupdated##) OR (##a.customproperty16 isupdated##) OR (##a.customproperty3 isupdated##) OR (##a.location isupdated##) OR (##a.city isupdated##) OR (##a.customproperty30 isupdated##) OR (##a.employeeType isupdated##) AND
a.userkey like (select distinct us.userkey from User_accounts us, Accounts ac where us.accountkey = ac.accountkey and ac.accounttype not in ('SECONDARY','PRIVILEGED') and ac.status = 1 and ac.endpointkey = 😎

[rushikeshvartak]

a.userkey like (select distinct us.userkey from User_accounts us, Accounts ac where us.accountkey = ac.accountkey and ac.accounttype not in ('SECONDARY','PRIVILEGED') and ac.status = 1 and ac.endpointkey = 

Wrong HQL

a.statuskey=1 AND (##a.firstname isupdated##) OR (##a.lastname isupdated##) OR (##a.manager isupdated##) OR (##a.departmentname isupdated##) OR (##a.title isupdated##) OR (##a.companyname isupdated##) OR (##a.state isupdated##) OR (##a.secondaryPhone isupdated##) OR (##a.street isupdated##) OR (##a.customproperty10 isupdated##) OR (##a.customproperty12 isupdated##) OR (##a.region isupdated##) OR (##a.enddate isupdated##) OR (##a.displayname isupdated##) OR (##a.customproperty16 isupdated##) OR (##a.customproperty3 isupdated##) OR (##a.location isupdated##) OR (##a.city isupdated##) OR (##a.customproperty30 isupdated##) OR (##a.employeeType isupdated##) AND
a.userkey IN (select distinct us.userkey from User_accounts us, Accounts ac where us.accountkey = ac.accountkey and ac.accounttype not in ('SECONDARY','PRIVILEGED') and ac.status = 1 and ac.endpointkey =