Hey guys, I was wondering if there’s a way to form a query to search and retrieve all Access Profiles in our tenant. As far as I’m aware it’s only possible to search access profiles for a specific source for example: source.name:"Active Directory" I need to fetch all access profiles first in orde…

This code seems to be working for us now :slight_smile: Just fetching access profiles and roles and excluding the access that we have tagged as “BAS”. { "autoRevokeAllowed": false, "description": "API Based Cert Campaign", "emailNotificationEnabled": true, "name": "Automated Certifi…

Filter for Access Profiles and use a simple * as your query

Thanks, as the query needs to be in a API call I can’t simply filter for access profiles only. source.name:* works to fetch everything but I need to filter to just access-profiles inside of the query itself somehow.

I think I managed to work it out… A query like: source.name:* AND NOT "Birthright*" This seems to work inside of the API call to filter out access that has a name that starts with Birthright, however. It doesn’t feel like the best solution however, seeing as naming needs to be perfect.

[image] Sebastian Wegmann: as the query needs to be in a API call I can’t simply filter for access profiles only. You can… by using "indices": ["accessprofiles"] that will return only Access Profiles in the result { "indices": ["accessprofiles"], "query": { "query": "*" …

Aha! { "autoRevokeAllowed": false, "description": "API Based Cert Campaign", "emailNotificationEnabled": true, "name": "Automated Certification", "recommendationsEnabled": true, "searchCampaignInfo": { "identityIds": [ "{{$.trigger.identity.id}}" ], "indices": ["accessprofiles"], "query": "NOT \"Bi…

[image] Sebastian Wegmann: "searchCampaignInfo": { "identityIds": ["{{$.trigger.identity.id}}"], "indices": ["accessprofiles"], "query": "NOT \"Birthright*\"", "reviewer": { "id": "{{$.getIdentity.managerRef.id}}", "type": "IDENTITY" }, "type": "ACCESS" } I…

Thanks a lot! Do you think it’s possible to somehow “flag” certain roles and/or access profiles in IDN and then exclude the flag keyword in the query?

Run a Search that will fetch the Roles/Access Profiles you want to “tag” and then using the checkboxes on the left of each record select the items (or select all). Now, by clicking the small label icon on the right top of the results table you can add any keyword you want to use for future search us…

Thank you, this is probably the best way :smiley: Is it possible to add roles to indices as well? Like so: "indices" : ["accessprofiles,roles"]

Format will be like this: ["accessprofiles", "accountactivities", "identities", "entitlements", roles", "events"]

How to fetch ALL Access Profiles in a tenant with a search query?

Identity Security Cloud (ISC) ISC Discussion and Questions

Swegmann (Sebastian Wegmann) August 17, 2023, 1:37pm 10

Thank you, this is probably the best way

Is it possible to add roles to indices as well? Like so:

"indices" : ["accessprofiles,roles"]

Topic		Replies	Views
SailPoint ISC API query filter to fetch access profiles for a specific source ISC Discussion and Questions identity-security-cloud	3	61	December 20, 2025
Access Profiles: Filter By Source Idea Discussions identity-security-cloud , search , access-profiles	0	46	August 12, 2024
How to list all identities that have Access Profile assigned ISC Discussion and Questions apis , identity-security-cloud	5	2154	July 19, 2023
Search query that returns all Access Profiles an Identity has ISC Discussion and Questions workflows , identity-security-cloud , roles , search , access-profiles	6	146	August 31, 2025
Query to get list of access profiles using ap owner ISC Discussion and Questions identity-security-cloud	3	84	September 6, 2025

How to fetch ALL Access Profiles in a tenant with a search query?

Related topics