Search with @accessModelMetadata()

Can someone share some examples of entitlement searches using the @accessModelMetadata ? I’m trying to find entitlements with specific metadata (iscRisk of high).

Thanks
Mike

Hi @mikemeyer ,

You can search a specific entitlements with it’s extended attribute value as per below search - @entitlements(attribute:memberOf) . In your case replace attribute value with iscRisk.

On other hand you can also perform the below search query
@access(type:ENTITLEMENT) && @entitlements(attribute:memberOf) .

Thanks,
Prashant

Useing the @access and @entitlements is documented but I cannot find info on the @accessModelMetadata. Do you have a specific example of using the @accessModelMetadata ?

Hi @mikemeyer,

Here an examples :

image

@accessModelMetadata(key:iscRisk) OR @accessModelMetadata(name:iscRisk)

@accessModelMetadata(name:iscRisk) AND @accessModelMetadata(value:high)
@accessModelMetadata(value:high)

The only think you want to know is your metadata structure and you can then combine different search query.

Hi @mikemeyer ,

As @accessModelMetaData is new functionality which ISC is implementing on a phase wise manner. It might be possible post you search you might see no results which should be fine.

But to perform a search query for the same it can be done as per @baoussounda.

I hope this might help.

Thanks,
Prashant

@mikemeyer were you able to search anything with these filters? (or anyone else for that matter…)
I cannot for the life of me query on any of those attributes…
The Search bar itself proposes to use @accessModelMetadata(key:something), and not @accessModelMetadata(attributes.key:something) like someone else proposed.
The query that I am trying to get: (or at least that implements the logic that I am looking for)

@accessModelMetadata(key:iscRisk) AND @accessModelMetadata(value:high)

This is what it looks like when retrieved via the API:

Yes, I agree with @tysremi .

So to perform a search to use @accessModelMetaData we can use it with (key:“XYZ”). As the current functionality is not implemented on all tenants because it’s a new feature so it might be possible post the search query you might see no results.

But the provided sample queries should work.

Thanks,
Prashant

I’ve also logged a support ticket for it just now, hopefully they can tell me more.

1 Like

I’m guessing the functionality isn’t implemented on the tenant I’m testing on. I had been trying searches with the syntax given with no results. I guess I’ll have to wait.

Yes, the current functionality isn’t implemented on all the tenants. It’s releasing in phase wise manner. Hence, I would suggest to wait or in case of urgency you can also open a service ticket with SailPoint.

[ Here an examples :

image

@accessModelMetadata(key:iscRisk) OR @accessModelMetadata(name:iscRisk)

@accessModelMetadata(name:iscRisk) AND @accessModelMetadata(value:high)
@accessModelMetadata(value:high)

May is the functionnality is not avaible rigth now for all tenant.

But @mikemeyer you can try it with api call by using v2024 experimental version.

When will this be available in all tenants? We need to use this metadata to generate a certification, but without proper API support we are forced to iterate over all entitlements in the tenant to find the ones with the relevant metadata.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.