Certification Campaign filter in ISC

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi all,

Can some one suggest inputs for below requirements:

  1. To create Certification campaign filter to get list of accounts having entitlements for particular source.
  2. We need to add only the entitlement owner as reviewer for above accounts instead of Manager or individual or governance group in campaign.

Thank you in advance

2

Here’s a link that might help! - Is there a way to setup Campaign based on Entitlement Owner

3

Just verifying but when you say campaign filter, are you referring to these?

If so, one thing to note is that the criteria are all connected by OR operators

image
image1007×272 24.7 KB

If you just wanted to use a filter based on certain accounts, then OR would work

account A OR account B OR account C

However, when you want to start including entitlements into the mix, this won’t work, because it ends up being

account A OR account B OR account C OR entitlement A OR entitlement B

Which means an account could be included in the campaign that is not account A,B,or C as long as it’s assigned entitlement A or B

Make sense?

4

Can’t you just create campaign of type SEARCH and specify:

  "searchCampaignInfo": {
    "type": "ACCESS",
    "query": "source.name.exact:\"SourceName\""
  }

create-campaign | SailPoint Developer Community

5

That’s normally what I would suggest, but I couldn’t tell if OP needed a filter because they were running an uncorrelated account campaign or not

1 Like
6

I made assumptions and jumped to conclusions :slight_smile:

Too early in the morning and not enough coffee

7

Hi @jason Ross & @mcheek ,

I have implemented this filter

 ` "searchCampaignInfo": {
    "type": "ACCESS",
    "query": "source.name.exact:\"SourceName\""
  }`

as in the creation I can’t able to assign it to specific entitlement owner. Can you please suggest how to make entitlement Owner as reviewer instead Manager/Individual Owner

And I am planning to do it from API - Can you please suggest feasible way because in Workflow I am not able to see Action/Trigger to get all certification Items so that i can validate owner with its entitlement owner and call Reassign Certification API. Please suggest me Feasible way.

Thank you.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.