Access profile name to be included in send email workflow action

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi, Need inputs on including access profile name in workflow send email action

Action to be triggered when access profile is approved. Email to be triggered to an application team with access profile name

Note: multiple access profiles been added to an application. So access profile requested in an application and approved to be displayed in an email

2

Hi Enosh!

You can try utilizing the Access Request Decision trigger for your workflow.

You can use a filter on this trigger such as: $.requestedItemsStatus[?(@.type==“ACCESS_PROFILE”)] to only trigger for Access Profiles being provisioned.

To display the access profile name in the email, you can use the Send Email action. Define the variable in the templating context and reference the variable in the body of your email as needed.

Please let me know if this helps!

  • Zach
3

Hello,

Thanks for the reply

I need to trigger application as a whole

We do have multiple access profiles configured in single application. So i need to add ‘send mail’ action for whole application

If user requests and approved any access profiles in the application

That approved access profile to be included in ‘send mail’ action

Thanks
Enosh

4

Need details on how i can include access profile name in email body (as a dynamic variable)

5

Trigger is working fine. Based on application. Need your help to include access profile name variable in email body (send mail action)

6

Hi Enosh,

You can use something like this in the Send Email Action. Just a note, this example I am providing works, provided only one Access Profile is requested at a time. Currently, only one Access Profile can be requested at a time, so this can work for you, but I know there is some discussion around possibly allowing for multiple Access Profiles to be requested in the future. If that is the case and this update is released, this Action will need to be updated in the future with something like a Loop or filter, depending on the desired outcome.

Since I assume your Trigger is filtering for only Access Profile type requests and only one Access Profile can be part of these types of requests, you can use the below information in your Send Email Action to have the Access Profile name included in your email body

Templating Context:
{“accessProfile.$”:“$.trigger.requestedItemsStatus[*].name”}

Body:
Thanks for requesting ${accessProfile}!

If this doesn’t work for you, can you please provide the Workflow you currently have setup?

  • Zach
7

Hello Zach,

Thanks a lot! It worked

Thanks
Enosh

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.