Get Identity roles (that meets membership criteria)

Identity Security Cloud (ISC) ISC Discussion and Questions
,
4

The approach that @punna0001 describes could work - If I’m understanding correctly:

  1. pull the roles and break down the criteria
  2. use the criteria from each role to perform a search:
    <roleCriteria> AND attributes.uid:<identity’s uid>
  3. Repeat #2 for each role and return the results

Something else that may be useful - I just remembered that there is a community tool provided by @ethompson during Developer Days 2024 that previews role changes using a PowerShell script. You can find the post here:

Hopefully that helps.

Matt