An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task? Solution:

The correct answer is B. No. No, the search syntax @accounts( source.name:"AD" AND disabled:true ) is incorrect for SailPoint IdentityNow because the attribute disabled may not be universally recognized or applicable for all sources in the system. Using the state:"disabled" condition (as in previous…

Identity Search and Reporting

Question

Options

AYes
BNo

How the community answered

(33 responses)

A
18% (6)
B
82% (27)

Explanation

No, the search syntax @accounts( source.name:"AD" AND disabled:true ) is incorrect for SailPoint IdentityNow because the attribute disabled may not be universally recognized or applicable for all sources in the system. Using the state:"disabled" condition (as in previous correct answers) is a more reliable and system-compliant approach to find disabled accounts. Key Reference from SailPoint Documentation: Standard Account State Search: The correct search syntax involves using state:"disabled" instead of disabled:true for querying disabled accounts.

Topics

#search syntax#identity search#Active Directory#disabled accounts

Community Discussion

No community discussion yet for this question.

Full SAILPOINT-CERTIFIED-IDENTITYNOW-ENGINEER Practice