An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow’s search features. Is this the correct search syntax to perform this task?

An IdentityNow engineer needs to find identities with disabled AD accounts by using IdentityNow’s search features. Is this the correct search syntax to perform this task?

Solution:

A . Yes
B . No

View Answer

Answer: B

Explanation:

The search syntax @accounts( source.name:"AD" AND disabled:false ) is not correct for finding disabled AD accounts. This query would return accounts that are not disabled because it is filtering for disabled:false. To find disabled accounts, the filter should specify disabled:true.

Key Reference from SailPoint Documentation:

Search Syntax for Disabled Accounts: To search for disabled accounts, the condition should check for disabled:true.