Exercise 10: Using Search

Basic Search

In this simulation you will be able to click/select elements. Feel free to enter text.
Programmed text will appear automatically.

In this exercise, you will execute a variety of search queries as an admin and explore the returned results to
better understand how your criteria specification is interpreted by IdentityNow Search.

1. If you have a user’s employee number and want to know who the user is, you can perform a simple
search using the employee number. Query Type 1e2a3c into the search field to find out who owns this
account. Click the Search icon .

Note that the object Identities and the account Adam.Rosen are returned verifying that Adam Rosen
owns account 1e2a3c.

Click Adam Rosen to view more. Using the navigation icon and navigate through Details, Accounts,
Entitlements, Access Profiles, and Applications tabs noting the information provided.

When done, click the X to close the window.

Click anywhere to continue.

2. If you want to find an entitlement/role/access profile related to a source such as Inventory or Payroll, you
can type the following query into the search field: Inventory OR Payroll.

Click the Search icon.

This search returns Identities and Entitlements objects in tabs.

Click anywhere to continue.

3. If you want to locate identities in a specific location, you could enter the following query:
attributes.location:Austin and filter for only Identities.

Click the Filter icon and select Identities to filter for only Identities.

Click the Search icon.

Click the column chooser and scroll down to add Location to the table.

Click anywhere to refresh the table.

Copyright © 2023 SailPoint Technologies, Inc. All Rights Reserved. v232

 This search returns only Identities whose location is Austin.

Click anywhere to continue.

4. What if you want to locate users who have an Active Lifecycle State? Enter the following query:
attributes.cloudLifecycleState:active.

Click the Search icon.

As expected, this search returns only those identities that have the LifecycleState attribute set to active.

Click anywhere to continue.

5. And if you want to find users find users with an account on a specific source? Try this query which looks
for users on the Employees source. Query: @accounts(Employees).

Click the Search icon.

This search returns Identities that exist in a specific source. In this case, the Employees source.

To verify this, click on the column chooser and add Source Name to show that these identities are a part
of the Employees source.

Click anywhere to refresh the table.

Click anywhere to continue.

6. Here is a query to list Entitlements from a specific source. This type of query may also return Access
Profiles associated with the source if they exist. Try this query: source.name:Directory

Click the Search icon.

In this example, Access Profiles and Entitlements were returned.

Click anywhere to continue.

7. Let’s determine which users report to a manager. In this query, manager names use the format first.last.
Amanda Ross is a manager, let’s search for users who report to her. Try this query:
manager.name:Amanda.Ross.

Click the Search icon.

Click the column chooser and add Manager Name to the table.

Copyright © 2023 SailPoint Technologies, Inc. All Rights Reserved. v232

 Click anywhere to refresh the table. Now you can see that each identity has Amanda Ross assigned as
their manager.

Click anywhere to continue.

8. Let’s expand the last query to include a list of users who have a Payroll Entitlement from the Directory
source. User Entitlements are recorded in an access array which uses the @access syntax.
Query: @access(source.name:Directory && name:Payroll).

Click the Search icon.

The results will display users who have the Payroll Entitlement.

To verify, click Janelle.Washington and navigate as before to Entitlements. See the Payroll Entitlement?\

Click X.

Click anywhere to continue.

9. Let’s create a list of terminated users (Inactive) with enabled Directory accounts. Query:
attributes.cloudLifecycleState:inactive && @accounts(source.name:Directory && disabled:false).

Click the Search icon.

The search results show two users who are currently Inactive (Lifecycle State).

Click anywhere to continue.

10. Let’s try locating Identities in Brussels who are in the Engineering or Information Technology
departments. Query: attributes.location:Brussels && (attributes.department:Engineering ||
attributes.department:"Information Technology").

Click the Search icon.

Click the column chooser and select Department and Location to add them to the table.

Click anywhere to refresh the table.

The search results show a list of users in Engineering or Information Technology who reside in Brussels.

You have successfully completed the Basic Search Exercises. Please scroll down and continue this lesson.

Copyright © 2023 SailPoint Technologies, Inc. All Rights Reserved. v232