Search Campaign in ISC

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

We are using a workflow to create a campaign. Sample payload below:

{

"accessType": "ACCESS",

“autoRevokeAllowed”: false,

“description”: "Access review via campaign,

“emailNotificationEnabled”: true,

“name”: “Certification name”,

“recommendationsEnabled”: false,

“type”: “SEARCH”,

“searchCampaignInfo”: {

“description”: “test campaign”,

“identityIds”: [

“<IDENTITY_ID>”

  \],

“mandatoryCommentRequirement”: “REVOKE_ONLY_DECISIONS”,

“query”: “@accessModelMetadata(name:\“Mover Review\” AND valueName:\“Yes\”)”,

“type”: “ACCESS”,

“reviewer”: {

“type”:“IDENTITY”,

“id”:“<REVIEWER_ID>”

  }

}

}

The campaign gets created but does not include the entitlements that have “Mover Review” set to “Yes” but are part of an Access profile or a role.

Could someone help with some guidance about how I can have a campaign created for a PARTICULAR Identity that involves all entitlements irrespective of them being in an access profile or not.

OR

Is there a way we can have ALL entitlements that have “Mover Review” set to Yes along with all Access profiles and roles that a user may be part of.

Thanks!

2

@shreyas_nitturkar
Could you paste screenshot of the workflow steps you built in the workflow builder ?

3

Could you please try again by removing the @?
It will most likely work that way.

4

@shreyas_nitturkar try using a tag option once if feasible with metadata i am not sure it will fetch properly

5

Worked by using a combination of accessConstraints and the query in the searchCampaignInfo {}