IdentityNow-Workflows-Compare String with Get Access

[gourab (Gourab Sadhukhan)]

Hi Team,
We can get all the access profile names/ids an Identity has using Get Access action in Workflows. Can we just check/compare if AccessProfile1 is present in Get Access list ? I want to send an Email if an Identity has a particular Access-profile.

Thanks,
Gourab

[colin_mckibben]

The use case you have described involves filtering lists of data. Workflows doesn’t yet have a specific operator that can filter lists, but it is in the roadmap to provide one. There is a loop operator, but it is limited to lists of up to 50 items. As long as your identities don’t have more than 50 access profiles, you could use the loop operator to check each access profile for a match, and then send the email. Check the documentation for the loop operator to see how it works.

Workflow Steps and Definitions - SailPoint Identity Services

[colin_mckibben]

I may have found a solution to your problem. Check out this response I made in another post.

Workflow - Compare String 'Contains' does not work

If you only need to determine if an identity has an access profile that starts with “Test-Access”, then I might have a solution for you. Rather than using Get Access, you can use the HTTP Request action to run a search based on your criteria. The request body will be as follows, but you might have to change the path to the identity ID based on your trigger. { "query": { "query": "id:{{$.trigger.identity.id}} && @access(type:ACCESS_PROFILE && name:\"Test-Access*\")" }, "ind…

[gourab (Gourab Sadhukhan)]

Hi @colin_mckibben , I seem to have one more simple workaround on this, We can just add “Get Access” action to fetch access profiles and then do a “Verify data type” action. on the action value can be added like this: $.getAccess.accessItems[?(@.name == ‘your accessProfile’)].name .Based on this we can get true or false.