Search Query to return source data

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi Team,

Does anyone has a sample query that returns all the users accounts of a source along with what entitlement they have access to?

I was trying to craft one but in the result set i am not getting the entitlements that the user account is assigned to.

2

I don’t think any ootb option until you use custom reporting via powershell sdk . other option i can think of is use search → Identities and then use include access details but this will give access to all the sources and then you need to sort out based on the source .

though this is not a great way if the number of access is way to high , it may take lot of time to generate this report .

image
image1120×400 18 KB

1 Like
3

Hello @Deepanshu07

You cannot achieve this using search .

You can utilise API’s to get this data . May I know the usecase to help you further ?

Thank you

1 Like
4

Hi @Deepanshu07,

You can make a Search API call with inner hit, with the body as something like below :

{
    "indices": [
        "identities"
    ],
    "query": {
        "query": "@accounts(source.name:SourceName)",
            "innerHit": {
            "type": "accounts",
            "query": "source.name:SourceName"
        }
    }
}

You will find the entitlements under the entitlementAttributes part of the response body.

5

Requirement is app team wants this data to be mailed to them.

The data should include all the user accounts along with what entitlements they are assigned to!

6

You will need to make use of a PowerShell script, that invokes the search API mentioned above.

The required output can be extracted from the response json, kept in csv format and can be send out to the required teams.