Use Case:
As we can not configure additional custom attribute to objects such as Entitlement, therefore, tag is commonly used to provide additional information to the object. While searching tagged object is possible, but ‘tags’ is not available under second level searchable attribute. For example, if we want to find identities who has both entitlements that tagged with ‘X’ and tagged with ‘Y’, a straight-forward idea would be:
@access(tags:X) AND @access(tags:Y)
However, this is currently not possible, having such functionality possible will definitely benefit Reporting and Policy Violation Detection abilities.
Thanks and Regards,