# How do I generate a report for all active users of a particular application along with their corresponding entitlements using a search query? **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** identity-security-cloud, search, reports\ **Created:** [July 18, 2025, 6:29am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335 "2025-07-18T06:29:08Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Ankitha12](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankitha12](https://developer.sailpoint.com/discuss/u/Ankitha12)\ **Post date:** [July 18, 2025, 6:29am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/1 "2025-07-18T06:29:08Z")
I have written a search query for a single application to get all active users and their corresponding entitlements: **@accounts(source.name:“ABC Application”) AND attributes.cloudLifecycleState:active** This query returns all active users for the **ABC Application** , but when I download the report, I see entitlements from other applications as well. How can I restrict the results to show only the entitlements related to the **ABC Application**? ---
**Author:** ![HussainshaSyed001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/hussainshasyed001/32/28234_2.png) [@HussainshaSyed001](https://developer.sailpoint.com/discuss/u/HussainshaSyed001)\ **Post date:** [July 18, 2025, 6:34am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/2 "2025-07-18T06:34:32Z")
use query like this @access(source.name.exact:ABC Application) ---
**Author:** ![nithyamn13](https://avatars.discourse-cdn.com/v4/letter/n/bc8723/32.png) [@nithyamn13](https://developer.sailpoint.com/discuss/u/nithyamn13)\ **Post date:** [July 18, 2025, 10:47am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/3 "2025-07-18T10:47:52Z")
Hi @Ankitha12 , Welcome to the Sailpoint Developer Community Try source id instead of name and see if that works @accounts(source.id:“\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*”) AND attributes.cloudLifecycleState:active ---
**Author:** ![pattabhi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pattabhi/32/25700_2.png) [@pattabhi](https://developer.sailpoint.com/discuss/u/pattabhi)\ **Post date:** [July 18, 2025, 12:04pm UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/4 "2025-07-18T12:04:15Z")
Hi @Ankitha12 Here is the workaround: (in my solution I use **Active Directory** source) `attributes.cloudLifecycleState:active` When you click Get report, you need to select `Include Access details` ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/2/b2e435594345e035dabccfebdc3749f7e5674067.png) finally, you need to filter on the downloaded report: **Access Type** : ENTITLEMENT and **Access Source Name** : ACTIVE DIRECTORY ![image](https://global.discourse-cdn.com/sailpoint/original/3X/5/7/57560bfaccfc6384e196a515bbdcc2dd4759621b.png) ---
**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\ **Post date:** [July 18, 2025, 12:11pm UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/5 "2025-07-18T12:11:08Z")
> [@Ankitha12](#): > > How can I restrict the results to show only the entitlements related to the **ABC Application**? You cannot do this with single search query. You will need a script to filter out unwanted entitlements from the result ---
**Author:** ![jainanimesh](https://avatars.discourse-cdn.com/v4/letter/j/8dc957/32.png) [@jainanimesh](https://developer.sailpoint.com/discuss/u/jainanimesh)\ **Post date:** [July 18, 2025, 12:20pm UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/6 "2025-07-18T12:20:03Z")
Hello @Ankitha12 Welcome to the community! This cannot be extracted from a single search query as there is no way in search to apply filters currently. There are two ways currently to suffice this - 1. Run your query in Search and Include Access Details while downloading the report. Filter this data for Access Source Name for the required application. 2. Go to Connections → Sources → Open Source → Go to Accounts Page → Click on Export. Filter the data as required. ---
**Author:** ![Ankitha12](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankitha12](https://developer.sailpoint.com/discuss/u/Ankitha12)\ **Post date:** [July 21, 2025, 6:48am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/7 "2025-07-21T06:48:18Z")
> [@HussainshaSyed001](#): > > @access(source.name.exact:ABC Application) Thanks for the help @HussainshaSyed001, but this query also does not to show only the entitlements related to the **ABC Application** ---
**Author:** ![Ankitha12](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankitha12](https://developer.sailpoint.com/discuss/u/Ankitha12)\ **Post date:** [July 21, 2025, 6:49am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/8 "2025-07-21T06:49:22Z")
Thanks for the suggestion @pattabhi, but client does not want to add filters in the excel(reports) ---
**Author:** ![Ankitha12](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankitha12](https://developer.sailpoint.com/discuss/u/Ankitha12)\ **Post date:** [July 21, 2025, 6:51am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/9 "2025-07-21T06:51:11Z")
> [@nithyamn13](#): > > @accounts(source.id:“\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*”) AND attributes.cloudLifecycleState:active Thanks for the suggestion @nithyamn13, but the query which you have shared also give the same result ---
**Author:** ![Ankitha12](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@Ankitha12](https://developer.sailpoint.com/discuss/u/Ankitha12)\ **Post date:** [July 21, 2025, 6:53am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/10 "2025-07-21T06:53:01Z")
Thanks for the help @jainanimesh, but client does not want to add filters in the excel(reports) ---
**Author:** ![vdivakar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/vdivakar/32/14308_2.png) [@vdivakar](https://developer.sailpoint.com/discuss/u/vdivakar)\ **Post date:** [July 21, 2025, 9:07am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/11 "2025-07-21T09:07:04Z")
Hi @Ankitha12 , the only way to export such customized report is via writing a Script. Use search API in Python/Powershell OR whichever Programming language you are comfortable with. Iterate through the response and write logic in the code to append only those rows which has entitlement source name listed as “Application ABC”. You could schedule this code to run on client’s server and send the report to any client side email address using client’s smtp server. Seems too much effort when we can just filter the exported data from Search Export. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [September 19, 2025, 9:07am UTC](https://developer.sailpoint.com/discuss/t/how-do-i-generate-a-report-for-all-active-users-of-a-particular-application-along-with-their-corresponding-entitlements-using-a-search-query/157335/12 "2025-09-19T09:07:39Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.