Hi all,
I've faced an issue while creating change requests. Eventhough application's account template is selected as $(User.User_Id} it acts like its choosen as another account template which is previously defined on the application. Value of roles_account_template_id on t_applications table is correct. The issue only occurs on that application.
For instance, while user_id is Emre and it must be shown as Emre in the cr, it shown as RSA/Emre.
Any help would be appreciated.
Hi Mostofa,
Thanks for your reply.
Change requests are triggered by a rule which has condition : If there are role members missing required entitlements for
As you can see below only ACC_TMPL_1 is assigned to application.
Previously ACC_TMPL_MSSQL was assigned but eventhough I change it to the ACC_TMPL_1 it acts like ACC_TMPL_MSSQL template. I tried to change it a few times in case of database cannot be updated but issue remains. Also, as I mentioned above I checked the t_applications table and account_template's value is correct.
Well in that case it is not a Role request … so to start off, it will definitely not use the Roles Account Template. Second point is, does the change requests generated from your Rule contain a "Create Account” change item or is it using an already created pending account object? Lastly in case this is an application, does this application user accounts from another directory (A setting on the application's general tab)?
What I would do is, for the sake of testing:
In addition,
ACC_TMPL_1 uses plain account name while ACC_TMPL_MSSQL add a prefix (lets say RSA) to account.
I've changed another application's account template from ACC_TMPL_MSSQL to ACC_TMPL_1 but change request are still created by using ACC_TMPL_MSSQL and adds prefix to accounts.
Since the change request itself is not generated from a Role change, so it will not be considered a Role change request. Ideally what created this request is Rule, not a Role, which is why it won't use the Role account template.
If the change request does not contain a "Create Account”, then it is not using the account template at all. I believe there is already a pending account created for your test user in that application. Ideally that should be removed if you cancel all his pending requests, if not then find another test user and maybe open a case with RSA support to see why this pending account does not get removed.
Do you have any other account templates linked to this application as shown in the following screenshot?
Also what type of change request are you testing this with?