Mover process shall trigger an access review for mover's manager, but shall exclude specific access profiles

The problem is that the “Create Certification Call” is very limited because you cannot apply all the criteria. E. g. you can say the reviewer type is individual and select the mover’s manager as the specific reviewer as in the screenshot below, but then you need to select “Identity Certification”, because if you select "Access Certification you cannot select that only this one mover identity shall be certified.



Or if you select “Manager” as reviewer Type, it would affect all the managers. There is no option to specify the manager then nor the person that shall be certified.

Therefore I did it with an HTTP request as described above. And in this API (create-campaign | SailPoint Developer Community) I chose the searchCampaignInfo, because here I can specify it all, but somehow the accessconstraints is not working as it should, eventhough it is correct with the evaluator. The same issue appears when I try to define a variable with the content $.getAccess.accessItems[?(@.name != ‘NameofAC’)].id It evaluates this in the input correctly, but then it fails with the failure message as seen below. I think this is because an array cannot be saved in a variable.(Workflow: Define Variable json: cannot unmarshal string into Go struct field MutativeOperatorInput.variables of type definition.Variables - #3 by mbo11)


There is also a campaign filter option in this API call, but it cannot be combined with the searchCampaignInfo I have also tried that, but I need to use the searchCampaignInfo, otherwise I cannot specify that only this mover user shall be certified by this specific manager.

With kind regards

Fabienne