Campaign Filter Using Default Account Attributes

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

How to create campaign filter with default account attributes like locked / disabled? I’m trying to only review accounts with locked as false.

I tried this but didn’t work. Appreciate insights.

{
    "id": "[MASKED_ID]",
    "name": "SAP UAR Campaign Filter Updated",
    "description": "Campaign filter to pull only active accounts from SAP Source for user access review.",
    "owner": "[MASKED_OWNER]",
    "mode": "INCLUSION",
    "criteriaList": [
        {
            "type": "COMPOSITE",
            "property": null,
            "value": null,
            "operation": "AND",
            "negateResult": false,
            "shortCircuit": false,
            "recordChildMatches": false,
            "id": null,
            "suppressMatchedItems": false,
            "children": [
                {
                    "type": "COMPOSITE",
                    "property": null,
                    "value": null,
                    "operation": "OR",
                    "negateResult": false,
                    "shortCircuit": false,
                    "recordChildMatches": false,
                    "id": null,
                    "suppressMatchedItems": false,
                    "children": [
                        {
                            "type": "ACCOUNT",
                            "property": "locked",
                            "value": false,
                            "operation": "EQUALS",
                            "negateResult": false,
                            "shortCircuit": false,
                            "recordChildMatches": false,
                            "id": null,
                            "suppressMatchedItems": false,
                            "children": null
                        }
                    ]
                },
                {
                    "type": "SOURCE",
                    "property": "application",
                    "value": "SAP",
                    "operation": "EQUALS",
                    "negateResult": false,
                    "shortCircuit": false,
                    "recordChildMatches": false,
                    "id": null,
                    "suppressMatchedItems": false,
                    "children": null
                }
            ]
        }
    ],
    "isSystemFilter": false
}
2

I was thinking about the same.

As long as attribute is available in Account Schema then you can configure the filter. It is good to have iiqDisabled and iiqLocked attribute to schema, so that we can have one single filter for all sources.

3

Thanks Krishna for letting me know about the IIQLocked Attribute. I was able to accomplish my requirement of excluding disabled and locked accounts using the filter below.

{
    "id": "[MASKED_ID]",
    "name": "SAP UAR Campaign Filter",
    "description": "Campaign filter to pull only active accounts from SAP Source for user access review.",
    "owner": "[MASKED_OWNER]",
    "mode": "INCLUSION",
    "criteriaList": [
        {
            "type": "COMPOSITE",
            "property": null,
            "value": null,
            "operation": "AND",
            "negateResult": false,
            "shortCircuit": false,
            "recordChildMatches": false,
            "id": null,
            "suppressMatchedItems": false,
            "children": [
                {
                    "type": "ACCOUNT",
                    "property": "attribute.IIQDisabled",
                    "value": "",
                    "operation": "EQUALS",
                    "negateResult": false,
                    "shortCircuit": false,
                    "recordChildMatches": false,
                    "id": null,
                    "suppressMatchedItems": false,
                    "children": null
                },
                {
                    "type": "ACCOUNT",
                    "property": "attribute.IIQLocked",
                    "value": "",
                    "operation": "EQUALS",
                    "negateResult": false,
                    "shortCircuit": false,
                    "recordChildMatches": false,
                    "id": null,
                    "suppressMatchedItems": false,
                    "children": null
                },
                {
                    "type": "SOURCE",
                    "property": "application",
                    "value": "SAP",
                    "operation": "EQUALS",
                    "negateResult": false,
                    "shortCircuit": false,
                    "recordChildMatches": false,
                    "id": null,
                    "suppressMatchedItems": false,
                    "children": null
                }
            ]
        }
    ],
    "isSystemFilter": false
}