Greetings!
I’ve been trying to get the search-API to return a list of all roles per identity that that identity has access to. Specfically I’m looking to get it as follows:
assume there are two identities and three roles. Identity 1 has access to roles 1 and 2, while Identity 2 has access to roles 1,2 and 3. I’d like my API to return a result similar to the following:
{“Identity.id”:“identityID1”, “access.id”:“roleID1”}
{“Identity.id”:“identityID1”, “access.id”:“roleID2”}
{“Identity.id”:“identityID2”, “access.id”:“roleID1”}
{“Identity.id”:“identityID2”, “access.id”:“roleID2”}
{“Identity.id”:“identityID2”, “access.id”:“roleID3”}
The furthest I’ve gotten is using the following API call:
{"indices":["identities"],"queryType":"SAILPOINT","query":{"query":"*","innerHit":{"type":"access","query":"type:\\"ROLE\\""}},"queryResultFilter":{"includes":["id","access.id","access.type"]},"sort":["+id"]}
The only thing that’s missing is that the result does not include the ID of the identity to which the retrieved roles pertains. Is there any way to have it included in the API-call?