Search for Access Requests to a specific App

[KevinHarrington]

Is there a way to search for all access requests and approvals for a specific application configured in ISC? We have an application set up with a few access profiles that point to our Active Directory source. We want to query requests and approvals just for those access profiles.

[Anshu_Kunal]

Please try below

Access Request Report

type:Access_Request AND source.name:'Active Directory'

Approval report

name:"Approval"

[KevinHarrington]

We have thousands of access request for Active Directory - which is why I’m trying to narrow my search down to the Application level, not the source level.

[Anshu_Kunal]

Didn’t come across search on Application yet not sure it is supported.

Similar post

Search query for application access

Hi @mario_rod , As of now, application name doesn’t get displayed in event. You can use below query & check for accessItemName (accessprofile requested) & sourceName ( source to which application is mapped to). Query: type:access_request AND “Request Access Processed”

Thanks

[margocbain (Margo Bain)]

Assuming that you want to search on a specific set of access profiles, you can try something like the below…

name:Approval AND attributes.accessItemName:"accessName"

This should return a list of approvals for that access profile.
For access requests, the following can be used:

type:Access_Request AND (details:"accessProfileName1" OR details:"accessProfileName2")