How to create identity attributes

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi All,

I am new to IdentityNow and having trouble locating documentation on how to create an identity attribute. We require a manager-has-direct-reports Boolean attribute so as to easily determine all identities that are managers. Any assistance would be greatly appreciated. Thank you.

2

Identity Attributes are created directly in the Identity Profile. Once created, that attribute will appear on all Identity Profiles in the tenant.

You can find all managers using Search and the query “isManager:true”

Hope that helps!

3

Thank you for the response. The challenge we are facing is that the attribute we need to create doesn’t exist on a source (apologies, I should have mentioned that in the original question). Our end goal is to create a manager Role, based on the new attribute; however, the process for adding the new attribute to an Identity Profile requires us to choose a source (see screenshot).

02-10-23 isManager
02-10-23 isManager894Ă—162 3.23 KB

Is it even possible to add an attribute that does not exist on a source, or is that not supported?

Alternatively, since isManager exists in IDN for search queries, can that be leveraged in any way for a role creation or is that attribute limited to searches?

4

@jnymeyer Unfortunately isManager exists in IDN for search queries only. I would suggest creating a transform that calculates the manager value.
Here’s a sample,

{
    "name": "Transform_Name",
    "type": "static",
    "attributes": {
        "value": "$identity.managerStatus"
    },
    "internal": false
}

Attach this to your identity attribute and then you can utilize that for creating manager Roles.

1 Like
5

When using a transform as @Sachin_Rajathadri proposed, the source and attribute you choose on the identity doesn’t really matter because the transform is populating the value independent of the source and attribute. I usually will use a field that always has a value (e.g. Source: EmployeeID) although I don’t know if that is required!

1 Like
6

Thank you. I will try this.

7

This worked perfectly. Thank you @Sachin_Rajathadri and @justinrhaines.

For future reference, is there a repository that contains transform attributes such as $identity.managerStatus?

8

@jnymeyer I haven’t seen a repository but try this link,

1 Like