Can we use link attributes in the filter of Identity Refresh task?

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

8.4 P2

Hi Team

Is it possible to use link attributes in the filter of Identity Refresh task?

For example, I want to refresh users whose userAccountControl attribute in AD accounts is 512. How to add this in the filter string?

Thanks

Divya M

2

Hi Divya, yes you should be able to use them in a filter as long as they are promoted to Link/Account attributes and are searchable

After creating the attribute, making it searchable, setting up the value mapping, and running an aggregation to populate the values. You can use the filter

links.userAccountControl == "512"

in your refresh to refresh all identities who have a Link who’s userAccountControl is 512. You can filter down further to a specific application if need be by adding additional filters.

1 Like
3

Hi @DivyaSubha you can make userAccountControl a “seachable” attribute under account mappings.

4

If I need to make userAccountControl as seacheable , it this the correct way?

uac
uac793×574 24.6 KB

5

Yes, this looks correct, Once aggregated, you can use the filter:links.userAccountControl == “512” that should work.

6

Hi @DivyaSubha yes, this is correct :slight_smile:

1 Like