The Access Profile data model does not include accessModelMetadata, unable to search access profile with accessModelMetadata attribute name and value. details explanation is below.
I can create custom metadata and assign to Access Profiles in non-prod environment. When I tried to list access profile with metadata query filter in search also in API, it is not working. Is this capability is not enabled ?
“query”: “@accessModelMetadata(name:uar) AND accessModelMetadata(value:true)” listing only roles
And tried without @ as “accessModelMetadata(name:uar) AND accessModelMetadata(value:true)” it returns entitlement that attached to role, and access profile and also standalone entitlements.
We need a method of generating certification campaigns that includes all entitlements, profiles, and roles which have been flagged with given metadata.
We assumed (but were disappointed) that the campaign generator would also discover and include higher-order access model types (profiles and roles) as needed to ensure the desired items would appear in the review.
We developed a script that would find all higher-order objects which include the desired entitlements and apply the same metadata.
The script is 100% effective at applying metadata to higher order objects.
HOWEVER, the campaign generation process does not see metadata on profiles because search still does not return these objects.
Please, finish this feature by making access profiles searchable with the accessModelMetadata keywords so we can stop fighting with tags. Or if it’s easier, fix campaign generation so that higher-order access model items are included appropriately.