An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow's search features. Is this the correct search syntax to perform this task?Solution:
Answer(s): A
Yes, the search syntax @accounts( source.name:"AD" AND state:"disabled" ) is correct, as it matches the necessary criteria for finding disabled AD accounts. This query searches for accounts in the AD source where the account state is set to "disabled," which effectively filters for the desired result.Key Reference from SailPoint Documentation:Correct Syntax for Disabled Accounts: The search correctly identifies accounts with a disabled state using this syntax.
Answer(s): B
No, the search syntax @accounts( source.name:"AD" AND disabled:true ) is incorrect for SailPoint IdentityNow because the attribute disabled may not be universally recognized or applicable for all sources in the system. Using the state:"disabled" condition (as in previous correct answers) is a more reliable and system-compliant approach to find disabled accounts.Key Reference from SailPoint Documentation:Standard Account State Search: The correct search syntax involves using state:"disabled" instead of disabled:true for querying disabled accounts.
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?Solution: It is possible. Delete the certification campaign associated with this application.
No, deleting the certification campaign associated with the application is not the correct step to remove approval requirements for an access request. Certification campaigns are related to periodic reviews of access, not the approval workflow for access requests. To remove the manager approval requirement, changes should be made to the access profile or the associated workflow, not the certification campaign.Key Reference from SailPoint Documentation:Certification Campaigns: Certification campaigns are used for access reviews and do not control approval workflows for access requests.
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?Solution: It is possible. Edit the access profile, and uncheck the box marked `Required Approval'.
Yes, it is possible to remove the approval requirement for an application in IdentityNow by editing the access profile and unchecking the 'Required Approval' box. This configuration change would eliminate the need for a manager or other approver to review access requests, allowing users to be granted access without requiring approval.Key Reference from SailPoint Documentation:Access Profile Configuration: Access profiles can be configured to require or not require approval for access requests, and this option can be modified directly in the profile settings.
An IdentityNow engineer has set up an access profile for an application. The access profile allows for users to request access, and for a user's manager to approve or deny access.After a recent staff meeting, management has expressed that they want to remove any approval requirements for this application.Is management's request possible in IdentityNow. and. if so. are these the recommended steps the engineer should take to meet their new requirement?Solution: It is possible. Delete the access profile.
No, deleting the access profile is not the correct way to meet the requirement of removing approval for access requests. The access profile defines the entitlements and permissions that users can request for an application. Deleting it would remove the entire ability to request access, rather than just removing the approval workflow. The correct step would be to modify the approval settings in the access profile (as explained in Question 44), not to delete it.Key Reference from SailPoint Documentation:Access Profile Management: Modifying approval settings in the access profile is the appropriate step to meet management's new requirement, not deleting the profile itself.
Post your Comments and Discuss SailPoint IdentityNow-Engineer exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the IdentityNow-Engineer content, but please register or login to continue.