Group Filter String

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

We have 2 types of entitlement : ROLE and RESPONSIBILITY. Now I want to aggregate only entitlements of type: RESPONSIBILITY. So I tried adding the group.filter on the source config via API. But It is not working as expected.

filter string:

[
{
“op”: “add”,
“path”: “/connectorAttributes/group.filterString”,
“value”: “!(DISPLAY_NAME.startsWith("Access Role for Person Directory"))”
}
]

I can update the entitlement schema removing the type: ROLE. But I don’t want to do that because we may use ROLE in future.

2

@Chandra, instead of group.filterString, try the following (if your connector supports):

[
  {
    "op": "add",
    "path": "/connectorAttributes/groupFilter",
    "value": {
      "attribute": "entitlementType",
      "operation": "equals",
      "value": "RESPONSIBILITY"
    }
  }
]

This works if your connector supports filtering and has an attribute like entitlementType. If your entitlements use a different field (like TYPE or DISPLAY_NAME), just change the attribute part to match that.

3

Which connector is this ?

Under Entitlement Aggregation, see if you have this, you can aggregate specific objects

image
image269×171 2.38 KB

4

@KRM7
This is Oracle EBS connector, I dont see this option under entitlement aggregation.

5

Ok, filterstring should work.

This will filter all the entitlements whose display name doesn’t start with Access Role for Person Directory

Just check without filterstring and with filterstring, if the aggregated entitlement count is same or different (to confirm whether some filtering applied or not)