Query completed campaigns by content

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi all,

Is there any possibility to search for a certification campaign by its content?

Example1: Campaign1 had the Role1 and has been completed 3 months ago. Now I want to search for “all completed campaigns, which included Role1 in the last year?“

One level deeper:
Example2: Campaign2 had the Role2 and Role2 includes Entitlement2. This campaign has been completed 3 months ago. Now I want to search for “all completed campaigns, which included Entitlement2 in the last year?“

Is this possible, if yes how can I build my search query?

Best Regards
Onur

2

To my knowledge that is not possible. The closest thing I can think of to do is to check the different campaigns individually. This would be useful though.

If you are able to you may be able to run a test where you add an entitlement/ role to a test user, remove that via a certification, and then check the removal on Postman. That may be able to point you to the correct query. I was going to workshop this a bit but there is too much red tape for me to do that.

I also took a quick look and did not see an Idea for this. Feel free and add it here https://ideas.sailpoint.com/ideas.

1 Like
3

@onbir I think you should be able to achieve these through API. API’s are available to create a campaign with the composition. So theoretically when you get the details of the campaign you should be able to see the composition also.

You may not be able to do a search like which campaign has these entitlements. But you should be able to get all the campaigns and from it search for what you want to.

4

Hi Vidya, I was able to build the following object model, and I’m now capable of searching for any name at any level. I wish I had it on the UI.

{
  "campaigns": [
    {
      "id": "campaign-id-123",
      "name": "Quarterly Access Review Q1",
      "certifications": [
        {
          "id": "certification-id-456",
          "name": "Identity Certification - John Doe",
          "reviewer": "Jane Reviewer",
          "access_review_items": [
            {
              "access_summary": {
                "entitlement": {
                  "id": "entitlement-id-1",
                  "name": "ActiveDirectory:CN=Finance-Admins"
                },
                "access_profile": {
                  "id": "access-profile-id-1",
                  "name": "Finance Access Profile",
                  "entitlements": [
                    {
                      "id": "entitlement-id-2",
                      "name": "ActiveDirectory:CN=Finance-Users"
                    }
                  ]
                },
                "role": {
                  "id": "role-id-1",
                  "name": "Finance Admin Role",
                  "entitlements": [
                    {
                      "id": "entitlement-id-3",
                      "name": "SAP_FIN_ADMIN"
                    }
                  ],
                  "access_profiles": [
                    {
                      "id": "access-profile-id-2",
                      "name": "SAP Finance Profile",
                      "entitlements": [
                        {
                          "id": "entitlement-id-4",
                          "name": "SAP_TCODE_FI01"
                        }
                      ]
                    }
                  ]
                }
              },
              "identity_summary": {
                "id": "identity-id-789",
                "name": "John Doe"
              }
            }
          ]
        }
      ]
    }
  ]
}
5

Glad to know that I was incorrect! I will need to implement this into my workflow somehow.

6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.