All User Access Report

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Is there an API endpoint that can provide all user’s access? We know with Search there is an option to “Include Access Details” that provides, more or less what we are looking for - a summary of all access in the system, including Role access (we have more than 4000) and Access Profiles. However this check-mark is mostly a black box and we cannot include that in a scheduled Search report and are attempting to generate the same summary from APIs. Is this possible

2

Hi Justin,

Are you looking for a report that provides all access assigned to a single user or for every user? The search API will return all access for each identity you search for.

If you want to get all access for a single identity, try:

POST https://{tenant}.api.identitynow.com/v3/search

{
    "indices": [
        "identities"
    ],
    "query": {
        "query": "name:{username}"
    }
}

For all identities, use this:

{
    "indices": [
        "identities"
    ],
    "query": {
        "query": "*"
    }
}

This will return a list of identities, and you can find all of their access in the access property.

4

I had this same issue and ended up building a report in Power BI to meet this need. Unsure if that helps, but I use the /v3/search API and use the queryResultFilter to only include the fields/objects I need to cut down on the response size.