Get list of identities with given entitlement

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We would like to get a list of identities with a given entitlement. Specifically, we are wanting all identity objects that have a given entitlement in Entra.

application = “Entra”;
entitlement = “My_Entra_Group”;

List identityList = getIdentities( application, entitlement );

I am looking to run this inside a BuildMap rule.

Thanks

2

use query as given
source.name.exact:“Entra” AND @access(type:ENTITLEMENT AND name:“My_Entra_Group”)

this will give list of identities

1 Like
3

That query did not work but I was able to make a query that did.

@accounts(source.name.exact:“Entra”) AND @access(type:ENTITLEMENT AND name:“My_Entra_Group”)

Back to my original question. I want this identical query to work in a BuildMap rule.
How do I format it in the rule?

4

To be fair your original question and title of this post said nothing about buildmap rule. It sounded like you wanted a search query.

1 Like
5

Fair enough. I could have been clearer. I was looking for Java code that could be included in a BuildMap rule to run a query for identities that had a specific entitlement.

1 Like
6

Do you need this rule in IIQ or ISC? In ISC you cannot use context object to find the application and use QueryOptions to filter for the required entitlement.

7

Hi Uday, I need this in ISC. In IIQ, I would use the QueryOptions and this would be easy. I am looking for a way to do this in ISC. This entitlement does have its own access profile if that helps.