Can someone share some examples of entitlement searches using the @accessModelMetadata ? I’m trying to find entitlements with specific metadata (iscRisk of high).
Thanks
Mike
Hi @mikemeyer ,
You can search a specific entitlements with it’s extended attribute value as per below search - @entitlements(attribute:memberOf) . In your case replace attribute value with iscRisk.
On other hand you can also perform the below search query
@access(type:ENTITLEMENT) && @entitlements(attribute:memberOf) .
Thanks,
Prashant
Useing the @access and @entitlements is documented but I cannot find info on the @accessModelMetadata. Do you have a specific example of using the @accessModelMetadata ?
Hi @mikemeyer,
Here an examples :
@accessModelMetadata(key:iscRisk) OR @accessModelMetadata(name:iscRisk)
@accessModelMetadata(name:iscRisk) AND @accessModelMetadata(value:high)
@accessModelMetadata(value:high)
The only think you want to know is your metadata structure and you can then combine different search query.
Hi @mikemeyer ,
As @accessModelMetaData is new functionality which ISC is implementing on a phase wise manner. It might be possible post you search you might see no results which should be fine.
But to perform a search query for the same it can be done as per @baoussounda.
I hope this might help.
Thanks,
Prashant
@mikemeyer were you able to search anything with these filters? (or anyone else for that matter…)
I cannot for the life of me query on any of those attributes…
The Search bar itself proposes to use @accessModelMetadata(key:something), and not @accessModelMetadata(attributes.key:something) like someone else proposed.
The query that I am trying to get: (or at least that implements the logic that I am looking for)
@accessModelMetadata(key:iscRisk) AND @accessModelMetadata(value:high)
This is what it looks like when retrieved via the API:
Yes, I agree with @tysremi .
So to perform a search to use @accessModelMetaData we can use it with (key:“XYZ”). As the current functionality is not implemented on all tenants because it’s a new feature so it might be possible post the search query you might see no results.
But the provided sample queries should work.
Thanks,
Prashant
I’ve also logged a support ticket for it just now, hopefully they can tell me more.
I’m guessing the functionality isn’t implemented on the tenant I’m testing on. I had been trying searches with the syntax given with no results. I guess I’ll have to wait.
Yes, the current functionality isn’t implemented on all the tenants. It’s releasing in phase wise manner. Hence, I would suggest to wait or in case of urgency you can also open a service ticket with SailPoint.
[ Here an examples :
@accessModelMetadata(key:iscRisk) OR @accessModelMetadata(name:iscRisk)
@accessModelMetadata(name:iscRisk) AND @accessModelMetadata(value:high)
@accessModelMetadata(value:high)
May is the functionnality is not avaible rigth now for all tenant.
But @mikemeyer you can try it with api call by using v2024 experimental version.
When will this be available in all tenants? We need to use this metadata to generate a certification, but without proper API support we are forced to iterate over all entitlements in the tenant to find the ones with the relevant metadata.