• State Suggested Answer
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 95 subscribers
  • Views 992 views
  • Users 0 members are here
Options
Related

Attestation policy - Edit condition

stig ingvar hylen
over 2 years ago

Hi,

We are setting up an Attestation Policy and need to limit the Attestation Campain to one spesific Department.

That way we will limit the number of attestation objects.

This is a System Role Membership attestation (Attestation Procedure)

And our "Condition" looks like this:

(EXISTS (select top 1 1 FROM (SELECT UID_ESet FROM ESet WHERE UID_ESet IN ('29971925-d5c9-4f84-9adc-6d57434e5d8d')) x WHERE x.UID_ESet = PersonHasESet.UID_ESet))

This condition is created in the webportal and copied to One Identity Manager for customizing.

How do we in this case include a spesific Department in the Where-clause?

Kind Regards

Stig Hylen

Parents
  • 0 over 2 years ago

    Hi Stig,

    Assuming by one specific department you mean that the identities are in one specific department then this might be what you need:

    xobjectkey in (
    select phe.xobjectkey from personhaseset phe
    join eset es on es.uid_eset = phe.uid_eset and phe.uid_eset = '29971925-d5c9-4f84-9adc-6d57434e5d8d'
    join person p on p.uid_person = phe.uid_person and p.uid_department = '<uid of department>'
    )

    This assumes that a Person's department is determined just by the value in Person.UID_Department ...... if your identities are in multiple departments (PersonInDepartment) then you will need to adjust the query accordingly.

    HTH, Barry.

Reply
  • 0 over 2 years ago

    Hi Stig,

    Assuming by one specific department you mean that the identities are in one specific department then this might be what you need:

    xobjectkey in (
    select phe.xobjectkey from personhaseset phe
    join eset es on es.uid_eset = phe.uid_eset and phe.uid_eset = '29971925-d5c9-4f84-9adc-6d57434e5d8d'
    join person p on p.uid_person = phe.uid_person and p.uid_department = '<uid of department>'
    )

    This assumes that a Person's department is determined just by the value in Person.UID_Department ...... if your identities are in multiple departments (PersonInDepartment) then you will need to adjust the query accordingly.

    HTH, Barry.

Children