19.4 Searching for Users or Groups

You can search for specific items in the catalog by selecting the type of item under Catalog, such as Users or Groups. Then type your search criteria in the search box, and select the search icon.

Identity Governance attempts to complete your search entry as you type. To ensure that users can more easily find a group, always include a description of the group that matches what users might use as a search term. For example, "Finance Team" for your financial group.

Some areas of the catalog provide advanced search options. If available, the search box contains a down arrow icon to access advanced search. The advanced search acts differently from the other searches in Identity Governance.

You can add additional criteria to the advanced search by clicking + icon. The advanced search ANDs all search criteria. Meaning for an advanced search to return a catalog item, it must meet all of the search criteria. Some attributes, such as applications or owners, support specifying multiple values in a single criteria to perform OR operations. For example searching for permissions from either application A or B.

The application or owner control provides a type-ahead feature to select applications or users in the system. Searching for applications, groups, or users requires selecting the catalog item. Advanced search does not currently support partial names for applications or owners.

The attributes that appear in the refinement list are fixed for Technical Roles, however, they can be configured for User and Permission catalog items.

To add or remove user attributes from the refinement list:

  1. Select Data Administration > User or Permission.

  2. Select an attribute to edit the attribute definition.

  3. Select the desired searchable option for the attribute to have it displayed in the catalog or not:

    Available in catalog searches. Change takes effect after publication.

    Select this option to enable the attribute for quick searches. If the option is selected, the attribute is available in the catalog list for searches. This means the search is performed against this column even if this column is not shown in the catalog list.

    Display as refine search option

    Select this option to enable the attribute for advanced searches.

    Display in review item selection criteria

    Select this option when you want the attribute displayed in review items. For more information, see Section 22.0, Running a Review Instance.

    Display in business role selection criteria

    Select this option when you want the attribute displayed when creating a business role membership expression. The membership expression contains the search criteria for membership in a business role. For more information, see Section 25.0, Creating and Managing Business Roles.

  4. Select Save, then publish the changes to the catalog.