Filter for in Provisioning completed Trigger

[Prashanth_Rathipelli]

Hello Sailors,

I have created a workflow to perform some http operation which is working fine as expected. I want this to be triggered only when a role is provisioned successfully. This role is mapped with an AD group and a delimited entitlement. Once the role is approved, the Ad group is going to provisioned and a Manual action item is getting generated. I want this workflow to be generated only after the Manual action workitem is marked as completed. I tried using this filter earlier $.accountRequests[*].attributeRequests[?(@.attributeValue==“CN=XYZ_valuation,OU=_Server_Security_Groups,OU=US,OU=SIT,DC=xyzgroupdev,DC=com” && @.attributeValue==“license”)] Here license is the delimited entitlement. Later I got to know that AND condition is not going work in this way. Can someone provide any suggestion on how to achieve this?

[liamkokeeffe (Liam OKeeffe)]

Hi Prashanth,

You can just include the filter for “license” in your filter string. So your filter would look like this:

$.accountRequests[*].attributeRequests[?(@.attributeValue==“license”)]

I am assuming AD is a direct connected source, so the AD group will be auto provisioned when an identity gets a role. So you don’t necessarily need to include that in your filter. If you need to be extra sure that the identity has the group, you could just include the delimited entitlement in the role, then request the AD group on behalf of the identity in your workflow after the delimited entitlement has been marked as provisioned.

Thanks,

Liam