Aggregation Account Filter Issue

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Team,

We are looking to filter the incoming accounts from a source(Direct Connector) based on the role attribute. We want to filter out and not aggregate those accounts if it does not contain any one of the 3 admin roles as shown below. If the account has any one of the admin role, they need to be aggregated.

This is the filter that we are using:

[
  {
    "op": "add",
    "path": "/connectorAttributes/account.filterString",
    "value": "(!role.contains({\"Admin Role1\"}) || !role.contains({\"Admin Role2\"}) || !role.contains({\"Admin Role3\"}))"
  }
]

However this returns 0 accounts though there are accounts without the above admin roles.

We have also tried the below filter after which we are getting all the accounts aggregated and the accounts are not filtered as expected.

[
  {
    "op": "add",
    "path": "/connectorAttributes/account.filterString",
    "value": "(!role.contains({\"Admin Role1\", \"Admin Role2\", \"Admin Role3\"}))"
  }
]

Can anyone let me know if there is anything missing in the filter or is there a way we can achieve this usecase using account filterString?

Thanks in Advance!

Regards,
Karthik

2

Hi Karthik,

I’m not sure where this filter configuration comes into play, can you tell me what connector your are using?

Thanks!

3

Hi Philip,

This is a Webservice Connector, we are applying this filter during account aggregation.
Reference to the account filter document that we are referring to is: IdentityNow Account Filtering during Account Aggregation - Compass

Thanks,
Karthik

4

Hi Karthik,

I was able to get it to work using the following syntax:

[
  {
	"op": "add",
	"path": "/connectorAttributes/filterString",
    "value": "!( id.contains( \"m\" ) ) || !( id.contains( \"d\" ) )"
  }
]

Note that even the spaces seemed to be important, it would not work properly unless it was exactly the way I have it.

5

Hi Philip,

How to filter regular expressions case like ^ [0-9]{4,5}$ ? it’s web service connector. We were able to achieve using customization rule in the IdentityIQ ?

Thanks
Navin