Data Extract Feature to fetch JML Data

Hi All,

We need to fetch joiner and leaver data on a real-time, monthly, or weekly basis, along with identity information such as first name, last name, email, and AD samAccountName, using the Data Extract feature. To achieve this, we are attempting to retrieve the data via the ProvisioningTransaction object class. However, we need to apply a filter where operation = create and application = Active Directory, but we have not found a way to implement such a filter in the YAML extract configuration.

  1. Does anyone have an idea on how we can apply multiple filters—such as AND, OR, greater than, and less than—within the filterString of the Extract YAML configuration.
  2. Please let us know if there is any other object class—besides ProvisioningTransaction—that can provide joiner, mover, and leaver (JML) data along with identity information.

Note: We are not looking to fetch JML data from a report, as we already have reporting in place. Our requirement is specifically to extract this data using the Data Extract feature.

If anyone has implemented a similar solution and can share details or examples, it would be greatly appreciated.

Regards,

Prashansa

Hi @Prash

As you mentioned in the above description, you are using YAML file. Can you share the screenshot of the YAML file that you are using so that I can help you to modify it for the AND properties.

Thanks

Hi @Prash

If you want to chain multiple filters in a filter string, you can use Java syntax with logic operators like && and || for ‘and’/‘or’.

Example: (operation == "<Operation_Name>" && application == "<Your_App_Name>")

Hi @msingh900

Thanks for providing the filterstring, but when I am trying with the suggested filterstring it is giving error -

An unexpected error occurred: sailpoint.tools.Parser$ParseException: Expected ‘)’ - Index: 23 (operation == “create” @and application == “Active Directory”) ^

Below is the snippet of YAML extract config

Can you please have a look and let me know if anything is not alinged.

Regards,

Prashansa

Hi @Prash

Please try operation name and application name without quotes or only a single quote.

Thanks

Hi @Prash

Please try the operation name and application name without quotes or only a single quote.

Thanks

Hi @msingh900

Without quotes below error is comin-

An unexpected error occurred: sailpoint.tools.Parser$ParseException: Expected literal value. - Index: 20 (operation == create @and application == Active Directory) ^

and with single quotes below error it is giving-

An unexpected error occurred: sailpoint.tools.Parser$ParseException: Invalid character literal - Index: 16 (operation == ‘create’ @and application == ‘Active Directory’) ^

Hi @Prash ,

Try with below filterString.

filterString: applicationName == "Active Directory" &amp;&amp; operation == "Create"

Hi @Arun-Kumar,

Thanks for providing the filter,it is working.

Could you please help me(if you have worked on or have the understanding) how using data extract feature we can expose the SailPoint API to power BI team to fetch the data from SailPoint.

Hi,

Does anyone have an idea if we can use two classes in one YAML config to fetch data.

For example - Retrieve the details of the identity for which a leaver event was triggered from the provisioning transaction object class, and determine how many application accounts that identity has from another object class.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.