# Search Identites Based on Manager Attributes

**URL:** <https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud\
**Created:** [March 21, 2024, 6:31pm UTC](https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664 "2024-03-21T18:31:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gaurav\_jain](https://avatars.discourse-cdn.com/v4/letter/g/aeb1de/32.png) [@gaurav\_jain](https://developer.sailpoint.com/discuss/u/gaurav_jain)\
**Post date:** [March 21, 2024, 6:31pm UTC](https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664/1 "2024-03-21T18:31:20Z")

</div>

I am trying to schedule a manager access review. One of the requirements id that if the reviewer is director or above, it should be assigned to a particular person. As I could not find any appropriate solution to automate this, I thought we will split it into two access reviews - one with managers director and above and another with managers that are not director and above. But it seems that search query can’t be written based on manager attributes. e.g. I tried manager.attributes.departmentName:“Testing” and it did not work. Can someone please confirm if it is even possible and if so how?

---

<div class="post-metadata">

**Author:** ![Sachin\_Rajathadri](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sachin_rajathadri/32/6381_2.png) [@Sachin\_Rajathadri](https://developer.sailpoint.com/discuss/u/Sachin_Rajathadri)\
**Post date:** [March 21, 2024, 7:26pm UTC](https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664/2 "2024-03-21T19:26:19Z")

</div>

Hi Gaurav,

See if this link helps:

> [@How to create identity attributes](https://developer.sailpoint.com/discuss/t/how-to-create-identity-attributes/8115):
>
> Hi All, I am new to IdentityNow and having trouble locating documentation on how to create an identity attribute. We require a manager-has-direct-reports Boolean attribute so as to easily determine all identities that are managers. Any assistance would be greatly appreciated. Thank you.

You could do a search based certification campaign.  
Certification Campaigns \>\> New Campaign \>\> Idenitites \>\> All identities returned by a query \>\> isManager:true

Hope this helps!

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [March 22, 2024, 7:57am UTC](https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664/3 "2024-03-22T07:57:07Z")

</div>

Hi @gaurav_jain,

You can use search query only on these manager attributes - manager.name,manager.displayName and manager.id as these are the only second level fields available. See the below documentation for further info.

> **[Searchable Fields - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/search/searchable-fields.html#manager)**
>
> SailPoint Identity Services Documentation

The solution would be to make use of an Identity transform and map the manager’s department value to the user (Say with an attribute name - managerdepartmentName).

The transform would look like this :

```auto
{
    "name": "Manager_Department",
    "type": "rule",
    "attributes": {
        "name": "Cloud Services Deployment Utility",
        "operation": "getReferenceIdentityAttribute",
        "uid": "manager",
        "attributeName": "department"
    },
    "internal": false
}

```

Once this is done, you can make use of the search query to find all users with the required manager dept value.

`attributes.managerdepartmentName:"Test"`

Here is the documentation on the transform :

> **[Get Reference Identity Attribute | SailPoint Developer Community](https://developer.sailpoint.com/docs/extensibility/transforms/operations/get-reference-identity-attribute/)**
>
> Get another user's identity attribute.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 21, 2024, 7:57am UTC](https://developer.sailpoint.com/discuss/t/search-identites-based-on-manager-attributes/36664/4 "2024-05-21T07:57:56Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.