# Search Active Directory Security Group by Managed By? **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** search\ **Created:** [March 20, 2023, 7:47pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511 "2023-03-20T19:47:56Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![MBowen](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mbowen/32/1500_2.png) [@MBowen](https://developer.sailpoint.com/discuss/u/MBowen)\ **Post date:** [March 20, 2023, 7:47pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/1 "2023-03-20T19:47:56Z")
Hi! Is there anyway to search for an Active Directory Security Group for an entitlement review by the Managed By field (managedBy) ? - bringing that attribute in from our AD Source - confirmed. - tried searching w/my knowledge already, but big empty returned… - it is not an identity attribute I have tried this: @accounts(source.managedBy:“Mark Morales”) Open for suggestions 🙂 ---
**Author:** ![rasmus\_lund](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rasmus_lund/32/2054_2.png) [@rasmus\_lund](https://developer.sailpoint.com/discuss/u/rasmus_lund)\ **Post date:** [March 21, 2023, 12:41pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/2 "2023-03-21T12:41:45Z")
Hi Margot. Are you looking to search for the AD group or for the accounts in that specific group? ---
**Author:** ![MBowen](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mbowen/32/1500_2.png) [@MBowen](https://developer.sailpoint.com/discuss/u/MBowen)\ **Post date:** [March 21, 2023, 1:04pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/3 "2023-03-21T13:04:17Z")
AD Groups that the ManagedBy = “This User” ---
**Author:** ![rasmus\_lund](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rasmus_lund/32/2054_2.png) [@rasmus\_lund](https://developer.sailpoint.com/discuss/u/rasmus_lund)\ **Post date:** [March 30, 2023, 2:39pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/4 "2023-03-30T14:39:01Z")
I don’t think that specific piece of information is searchable in the Entitlement Model: [Searchable Fields - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/search/searchable-fields.html#searching-entitlement-data) The @accounts search string implies it will search for that at the account level. You could try to use the bulk certification tool to achive that use case, given that you can extract the managedBy references → [https://community.sailpoint.com/t5/IdentityNow-Articles/Bulk-Certification-Tool/ta-p/77926](https://community.sailpoint.com/t5/IdentityNow-Articles/Bulk-Certification-Tool/ta-p/77926) Note, we are adding entitlement level ownership that will alleviate this down the road, but no clear/commited timeline on that one. Sorry for the late reply, did cross-check with PM 🙂 ---
**Author:** ![MBowen](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mbowen/32/1500_2.png) [@MBowen](https://developer.sailpoint.com/discuss/u/MBowen)\ **Post date:** [April 4, 2023, 2:35pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/5 "2023-04-04T14:35:01Z")
I think I figured - replacing Owner in the entitlement attributes - with managedBy (or adding it) so if someone has a rouge owner field being used, vs managedBy I can get both… testing it today. ---
**Author:** ![Yeswanthg](https://avatars.discourse-cdn.com/v4/letter/y/5f8ce5/32.png) [@Yeswanthg](https://developer.sailpoint.com/discuss/u/Yeswanthg)\ **Post date:** [May 16, 2023, 8:02pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/6 "2023-05-16T20:02:21Z")
Hi @MBowen were you able to add managedBy attribute & pull the data from AD ? ---
**Author:** ![MBowen](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mbowen/32/1500_2.png) [@MBowen](https://developer.sailpoint.com/discuss/u/MBowen)\ **Post date:** [June 29, 2023, 6:24pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/7 "2023-06-29T18:24:10Z")
We are testing this now. ---
**Author:** ![MBowen](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/mbowen/32/1500_2.png) [@MBowen](https://developer.sailpoint.com/discuss/u/MBowen)\ **Post date:** [July 13, 2023, 3:39pm UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/8 "2023-07-13T15:39:34Z")
Hello - **we were not able to add this.** However, our talented powershell developer was able to put a set of code together that takes the managedby and populates the owner for entitlements. So far we are seeing the data populate accordingly. But as mentioned here: [Entitlement Ownership : Search and Updates](https://developer.sailpoint.com/discuss/t/entitlement-ownership-search-and-updates/12913) I am not sure if there is a bug w/the search for owner because we are not getting it to come up in the search. ---
**Author:** ![aditya\_pathak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aditya_pathak/32/2758_2.png) [@aditya\_pathak](https://developer.sailpoint.com/discuss/u/aditya_pathak)\ **Post date:** [July 18, 2023, 12:36am UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/9 "2023-07-18T00:36:36Z")
> [@MBowen](#): > > I am not sure if there is a bug As mentioned on [Entitlement Ownership : Search and Updates](https://developer.sailpoint.com/discuss/t/entitlement-ownership-search-and-updates/12913) , retry after an entitlement aggregation on the source ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [September 16, 2023, 12:36am UTC](https://developer.sailpoint.com/discuss/t/search-active-directory-security-group-by-managed-by/9511/10 "2023-09-16T00:36:49Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.