Aggregate Users with manager attribute and aggregation filter on extensionAttribute

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello there,

I am using an entraID source where I need to aggregate users with their manager attribute.
I also want to filter them using the extensionAttribute6

So far here is what I found out:
This filter works fine as long as the advanced filters checkbox is check
onPremisesExtensionAttributes/extensionAttribute6 eq ‘USR’

The manager attribute cannot be added to account schema as long as the advanced filters checkbox is check

It seems some headers are only added when checked: ConsistencyLevel: eventual, and the count parameter.

1 Like
2

Hi @RLM-AP Unfortunately, to use the advanced filter you have to remove the manager attribute from the account schema as per the documentation Aggregation, Filter, and Partitioning Settings (sailpoint.com). If you need the UPN of the manager, you can probably create an identity attribute called “Manager User Principal Name” where you will store the UPN instead of having it as an account attribute. Let me know if this works for you and I can provide more details on how to set it up.

3

Hello there,

Thank you for your answer. :slight_smile:
The goal here is more to be able to keep the manager (or sponsor) attribute up to date on Entra.
On identity side we already configured another attribute for the manager so we can synchronize it if necessary.

If we have a Guest Account fdor which we do not have an on-prem account on Active Directory, this will mean that the only way to update it is to use an identity attribute, but that does not seem possible right now.

4

Hello,

We no longer need the manager attribute, as such, there is no longer a problem.
Thank you for your help.

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.