Skip to main content

AccessCertificationDataFilter

When running an Access Certification Campaign, this object defines the scope of assignments of entitlements to certify for a given Access Certification Campaign. It filters based on the specific entitlements attributes.

Properties

PropertyDetails
Campaign requiredType Int64 Description The associated campaign.
Category optionalType Int64 Description Specifies the category targeted by the filter.
IncludeCompositeRoles default value: falseType Boolean Description true to include the composite roles in the certification.
IncludeDeniedPermissions default value: trueType Boolean Description Filters items with denied permissions from Access Certification Campaign.
IncludeDoubleValidation default value: trueType Boolean Description true to include the assignments of entitlements with two validations in the certification.
IncludeManualAssignmentNotAllowed default value: trueType Boolean Description true to include in the certification the resources that cannot be requested manually, i.e. those from resource types with ApprovalWorkflowType set to ManualAssignmentNotAllowed. See the Resource Type topic for additional information.
IncludeNestedCategories default value: falseType Boolean Description When a category is used as filter, all its nested categories are also included in the campaign.
IncludeNoValidation default value: trueType Boolean Description true to include the assignments of entitlements without validation in the certification.
IncludeResourceNavigations default value: falseType Boolean Description true to include the resource navigations in the certification.
IncludeResourceScalars default value: falseType Boolean Description true to include the resource scalars in the certification.
IncludeResourceTypes default value: falseType Boolean Description true to include the resource types in the certification.
IncludeSimpleValidation default value: trueType Boolean Description true to include the assignments of entitlements with one validation in the certification.
IncludeSingleRoles default value: falseType Boolean Description true to include the single roles in the certification.
IncludeTripleValidation default value: trueType Boolean Description true to include the assignments of entitlements with three validations in the certification.
IncludeWorkflowStateApproved default value: trueType Boolean Description true to include the manually approved assignments of entitlements in the certification.
IncludeWorkflowStateFound default value: trueType Boolean Description true to include the reconciled assignments of entitlements in the certification.
IncludeWorkflowStateHistory default value: trueType Boolean Description true to include the preexisting approved assignments of entitlements in the certification.
IncludeWorkflowStatePolicyApproved default value: trueType Boolean Description true to include the automatically approved assignments of entitlements in the certification.
LatestCertifiedLimitDate optionalType DateTime Description If specified, only assignments of entitlements not certified since.
ResourceType optionalType Int64 Description Specifies the resource type targeted by the filter.
Tags optionalType String Description Tags of the roles targeted by the campaign filter. The tag separator is ¤.
TargetedRisk optionalType Int64 Description If set, filters on the owner risk.