An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task? Solution:

The correct answer is B. No. The search syntax @accounts( source.name:"AD" AND disabled:false ) is not correct for finding disabled AD accounts. This query would return accounts that are not disabled because it is filtering for disabled:false. To find disabled accounts, the filter should specify…

Identity Search and Reporting

Question

Options

AYes
BNo

How the community answered

(42 responses)

A
17% (7)
B
83% (35)

Explanation

The search syntax @accounts( source.name:"AD" AND disabled:false ) is not correct for finding disabled AD accounts. This query would return accounts that are not disabled because it is filtering for disabled:false. To find disabled accounts, the filter should specify disabled:true. Key Reference from SailPoint Documentation: Search Syntax for Disabled Accounts: To search for disabled accounts, the condition should check for disabled:true.

Topics

#search syntax#identity search#Active Directory#disabled accounts

Community Discussion

No community discussion yet for this question.

Full SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER Practice