Unlock Account Without Manager Approval

[fewthiraphat (Thiraphat Itamonchai)]

Version

8.4

Images

Question

Hello Everyone,

Currently, when I click Unlock, it triggers the LCM Provisioning Workflow. I’ve also noticed that making any changes in Manage Account also triggers the same workflow.

My requirement is:

• If the user clicks Unlock, the action should not require manager approval.
• For any other changes in Manage Account, manager approval should be required.

I think I might be able to write a script to handle this logic within the workflow, but I’m not sure how to approach it, as I don’t have much experience with this.

Could you please guide me on how to achieve this?

[pattabhi (Pattabhi Nandarapu)]

Hi @fewthiraphat

Small Observation:
in your screenshot for both you have selected LCM Provisioning

1. Manage Accounts
2. Unlock User Account

so in Unlock User Account select different workflow which will not trigger any approvals.

[fewthiraphat (Thiraphat Itamonchai)]

Hi @pattabhi,
Thank you for your comment, and apologies for the confusion in my previous message. I did try creating a new one and applied it, but it’s still not working—it continues to use the same workflow with Manage Account.

** Updated Image **

[santhirajumunganda]

Hello @fewthiraphat are ‘LCM Provisioning’, ‘Testing LCM Provisioning’, and ‘Test LCM Provisioning’ essentially the same—just with different names? Or did you create your own custom workflows?

[fewthiraphat (Thiraphat Itamonchai)]

Hi @santhirajumunganda, sorry for the confusion, they are actually different. I created and custom it for the testing purpose.

[santhirajumunganda]

Since you’re already using the Test LCM Provisioning workflow for unlocking accounts, check whether the approvalScheme key is present. If approval is not required, simply remove the value from the approvalScheme key — this will disable approvals.

[tsandeepsTmob (Sandeep Singh)]

Pass the approvalScheme= “none”, if flow is Unlock in your workflow.

[fewthiraphat (Thiraphat Itamonchai)]

Hi @tsandeepsTmob and @santhirajumunganda , this is the script that I added before Create Ticket step, is it correct?

import java.util.*;
import sailpoint.object.*;

// Get approval items
List approvalCheck = approvalSet.getItems();

String operation = "";

for (Object x : approvalCheck) {
        operation = x.getOperation();
}

// Check if operation is "Unlock"
if ("Unlock".equals(operation)) {
    approvalSet = null;
    approvalScheme = null;


}

[fewthiraphat (Thiraphat Itamonchai)]

I marked this as a solution for this, thank you everyone to helping me.