Remove AttributeRequest from AccountRequest

[White (Rodrigo Branco)]

IIQ version

8.2

Use Case

I have three entitlements that have the same prefix (e.g. ABC-123, ABC-456, and ABC-789). When I am adding an entitlement to a user, if the user has already one of these entitlements, I want to block the form from performing the operation.

It should appear a pop-up message stating that the user already has the said entitlement. How can I do this?

[sathishiam (Sathish Kumar)]

@White

If your entitlements are fixed and limited, please use Entitlement SOD policy, if its prefix based, please use advanced SOD policy with the conditions required.

Take a look at

Advanced Policy Violation Rule

Hello Sailors, If you would like to prevent user from submitting a Request for any business use cases User should not have both approver and requestor Roles User should not have more than 1 Role at a time User who has account in application already can only request for the additional groups Only some department users can request for the Role or Entitlement Or any custom condition(s) It is better to prevent the false request instead of depending on approvals, assuming that approver anyway wil…

[bhanuprakashkuruva]

You can do using Entitlement SOD Policy.

https://community.sailpoint.com/t5/IdentityIQ-Articles/Policies/ta-p/79011#toc-hId-1070083208