Role Membership report

Administration & Troubleshooting
,
1

How to get Role Membership report in IdentityNow? What is the Search Query String?

I need simple report like:

RoleName  Member

RoleOne   John Smith

RoleOne   Anna Brown

RoleOne   Peter Jacobs

RoleTwo   John Smith

RoleTwo   Barbara Str

RoleThree   Jake Brown

RoleFour  Johan Brown

2

Hi  @sergiyshpak  ,

You can get the list of users assigned to a specific role by running the below search query:

@access(name:“NAME_OF_ROLE” AND type:ROLE)

You can use the same query to see who all are assigned to a specific Access Profile or Entitlement by changing the value of type.

@access(name:“NAME_OF_ACCESS_PROFILE” AND type:ACCESS_PROFILE)

@access(name:“NAME_OF_ENTITLEMENT” AND type:ENTITLEMENT)

You may refer to this link to know more about search.

I don’t think you can generate something in a format that you shared by using search queries.
But I am sure this can be achieved via powershell.

Thanks,

Abhi

3

request returns “Name of the person” and Count of roles person has

probably solution is

“I don’t think you can generate something in a format by using search queries.”

and I see your answer about API call, that is helpful !!

4

API is the way to do this. and I use powershell for it.

Here’s what I do::

1) get all roles through search or API. I use API

$meth = “GET”
$call = “https://TENANT.api.identitynow.com/v3/roles?limit=250&offset=$offset”

I run it in a DO loop WHILE the $report.count -eq 250

2) I take the role list, and run it in a second script that intakes the rolenames from the exported CSV above.

ForEach ($Role in $RoleNames){
$meth = “POST”
$call = “https://TENANT.api.identitynow.com/v3/search?limit=10000”

which I run a query on $SearchID = $Role.RoleID of “query”: ‘@access(id:$SearchID)’

this script runs through a loop as well for the members using search after

The report I produce is in the format you want.

role name, user prop1, user prop2, etc…