Workflow - form inside loop "Identity not allowed to do this operation"

[ArielM (Ariel Mercado)]

Hello team,

I’m trying to send a form to a governance group within a workflow. If one of the group’s members approves the form, the request will be processed.

I’m sending it via a loop step. When I send it to a fixed identity, everything works fine, but when I use a variable “$.loop.loopInput.email” from the loop containing the email address of each group member, the link to the form displays the following message:

I also tried to send the name and username but it didn’t work, any idea what could be happening?

[pattabhi (Pattabhi Nandarapu)]

Hi @ArielM

Please check below solution from @sidharth_tarlapally , hope that helps!

Sending email to workgroup from ISC workflow - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

[ksbagade (Kartik Bagade)]

Hi @ArielM,

It’s possible that your JSONPath expression might need modification since the email attribute is part of a list.

You can try using this:
$.loop.loopInput[*].email

If this does not work, please share more details about the Loop step “Loop 2”.

[ArielM (Ariel Mercado)]

Hi!

I tried the solution from the topic, but the same message still appears when I open the form.

Now I’m using an HTTP request to get the group members from “{{baseUrl}}/workgroups/:workgroupId/members”, and retrieving the members like this:

[
    {
        "email": "testmail@dummy.com",
        "type": "IDENTITY",
        "id": "8822d48g7fe348243546482d5410ba7e",
        "name": "User Test"
    }
]

Then I use a Form step outside the loop like this:

Then I received the same message “current identity not allowed to do this operation” when I open the form from the mail.

[ArielM (Ariel Mercado)]

Hi, I solved this issue by using the IDs of the users instead of their email addresses.

$.hTTPRequest3.body[*].id