All, I am not familiar nor do not know how to create rules. But, I am looking for a way for the “manager” quicklink population to only request access for specific entitlements. Does anyone have a way without creating a rule to do this? The only thing I have found is under “What can members request?…

Copy the rule below and save it as XML file (using Notepad, Notepad++, vi, emacs, …) <?xml version='1.0' encoding='UTF-8'?> <!DOCTYPE Rule PUBLIC "sailpoint.dtd" "sailpoint.dtd"> <Rule language="beanshell" name="Specific Entitlemens for Specific Managers" type="RequestObjectSelector"> <Source> …

Hi Derrick, The first question to ask is: How to determine which specific entitlements a manager can request? Do you want to use an entitlement attribute for it (i.e. allowedToRequest=true or entitlementBelongsTo=“department a”), is it based on scoping, is based on an application (i.e. only allo…

It can be based on: 1.Application and 2a.Value or 2b. Display value But than you need to maintain lists in a rule which is not really maintainable when this list grows big. Plus every manager would have the same entitlements (which might not be a problem). If the allowed to be requested entit…

The quicklink I have made is only for a specific type of manager and also my leadership let me know that the attribute would need to only be the display value. If this is the case, what I am wanting in the quicklink population is for this particular type of manager to only be able to request entitle…

Ok. I can create a skeleton rule for you (after I have made and have diner). Or if anyone else wants to create it, be my guest :slight_smile: – Remold

And where exactly would I be importing this rule into?

That would be great. So this rule would be imported and should go into the rules object correct?

Hi @derrickthomasvdot Just to add on @Remold said. You can use Custom Object to store the entitlements. This way you don’t have to change the rule every time. You can update the Custom Object. Please find the snippet for using Custom Object Custom customObject = context.getObjectByName(Custom…

What about a rule with just the Display value? Can that be written?

Sure, that is possible too :slight_smile: From @Jarin_James example, chaange: Filter f = Filter.and(Filter.eq("application.name", key),Filter.ne("displayName", displayName)); to Filter f = Filter.eq("displayName", displayName); Note: ne stands for ‘Not Equal’ and eq for ‘Equal’. It looks like J…

Creating a way for a manager to only request specific entitlements and roles

IdentityIQ (IIQ) IIQ Discussion and Questions

derrickthomasvdot (Derrick Thomas) July 27, 2023, 2:14pm 3

I would be nice if it was based on the following attributes:

1.Application
and
2a.Value
or
2b. Display value

I added a screenshot in my UAT environment as an example.

Topic		Replies	Views
Extra Entitlements Show Up in Access Request Search IIQ Discussion and Questions rules , identityiq , provisioning , entitlements	6	207	September 20, 2024
Quicklink Population: Filtering what a user can select to remove IIQ Discussion and Questions rules , identityiq , access-requests , entitlements	6	530	July 9, 2024
How to configure to request for entitlement only in the access request page in IIQ? IIQ Discussion and Questions identityiq , access-requests	7	316	June 21, 2024
How to fliter entitlements in mange user access page based on the application selection IIQ Discussion and Questions identityiq	6	1056	June 2, 2023
How to restrict Access Request based on requestee IIQ Discussion and Questions identityiq	5	155	September 17, 2025

Creating a way for a manager to only request specific entitlements and roles

Related topics