Excluding privilege access from certifications

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Please consider addressing the following when creating your topic:

  • What have you tried?
  • What errors did you face (share screenshots)?
  • Share the details of your efforts (code / search query, workflow json etc.)?
  • What is the result you are getting and what were you expecting?

Hi all,
What is the smartest way to exclude privileged entitlements from all the sources while creating certification campaign?
For example: you have 200 privilege entitlements from 10 different sources - how do you exclude that from certification campaign without manually tagging those from search?
Thanks in advance.

2

Hi @Ujjwol_rowe ,

while surfing across the community I came across this link may help

Avinash Mulpuru.

3

Hi Avinash,
I tried using it:

image
However, it only returned identities not entitlements that are marked as true in privileged.

4

Hi @Ujjwol_rowe ,

from my side when I mark entitlement as previleaged from Entitlement tab I was able to fetch using privileged:true

can you try again by marking any enetilement as previlaged true

thanks in advance
Avinash Mulpuru.

5

Hello @Ujjwol_rowe , If you want to exclude all the priv entitlements from cert campaign, then you can leverage the use of search and use below query

privileged:false AND source.name.exact:””- this query will include the users who doesn’t have any privilege access

Also, I tried using below query where it’s providing me the list of ents

image
image1563×538 23.6 KB

1 Like
6

Thank you Avinash,

I was doing it like @access(priviledge:true) which is why it resolved identities only.

7

Follow up: Can we exclude these entitlements while running campaign via identities search?

8

Hi @Ujjwol_rowe ,

Have you tried the query provided by @JackSparrow which will list un privileged entitlement of particular source if this giving exact results that you looking for you can append AND condition for remaining 9 sources if I’m not wrong

Let me know if you need anything

Thanks in advance

Avinash Mulpuru

9

Hi @amulpuru @JackSparrow
I think I framed my question wrongly. I am required to exclude these entitlements that are marked privileged while running campaign through Admin>Certification>Create Campaign since, I have another filter on.
So, the question would be - can we filter these out by using exclusion filter via Certification filter?