identityQueryString for creating Certification Campaign

Identity Security Cloud (ISC) ISC Discussion and Questions
1

I am working with a script that uses the /cc/api/campaign/create API to create an entitlement owner certification campaign via a feed file. The feed file contains a list of entitlements and the source name (optional) for where the entitlements are from.

It currently uses the following:

“identityQueryString” => “@access(type:(ENTITLEMENT))”,

with an ‘accessInclusionArray’ containing the list of entitlements to be included.

The problem I am facing is that entitlements with a space in the name do not work properly. For example, “Domain Admins” will result in all identities with the “Domain Users” entitlement being included.

I would like to change the query to use the .exact keyword but have not been able to craft one that works.

I can provide more of the script code if needed.
Thank you

2

Hi @tsawicki ,

Please try with Entitlement name in double quotes in array.

All spaces that aren’t in double quotes are treated as an OR operator. Therefore “Domain Admins” becomes Domain OR Admins.

Regards,
Anamica

1 Like