Search for Identities

EmpowerID includes a powerful search engine that allows you to quickly find information about the people and other resources within your organization. Each type of resource, such as user accounts, people, and groups, has a Find page associated with it. Find pages contain a Locations tree, basic and advanced search fields, a grid that displays resource records, and contextual action links that can be used to perform an action against a specific resource object.

As an example, the below image shows what the Find page for user accounts looks like with all user account records returned from a basic search for a specific user.

Using basic search like that shown above is helpful when you know which users you are searching for. Simply enter a search term, such as the name or logon name of the user and EmpowerID returns the exact record(s) related to the search term. In scenarios where you need to return records for multiple users, you can use the advanced search features, the Locations tree, or a combination of both. For example, if you want to see all user accounts in a specific domain or directory, you can search for and select that domain from the Locations tree as shown in Figure 2 or enter it into the Domain or Directory field of the advanced search feature as shown in Figure 3.

Searchable Fields

Each type of identity object stored in the EmpowerID Identity Warehouse is searchable based on a set of search terms relevant to the type of object. Each search term is linked to an attribute that correlates to the object. To successfully find identities using basic search, the search terms entered into the basic search field on the related Find pages must match an allowable attribute. These are listed by identity type in the below tables.

User Account Search Terms

Attribute	Description	Search Result
Name	The name of the user account	Returns all user accounts with the specified name
FriendlyName	The friendly or display name of the user account	Returns all user accounts with the specified friendly name
Email	The email address of the user account	Returns all user accounts with the specified email address
FirstName	The first name of the user account	Returns all user accounts with the specified first name
LastName	The last name of the user account	Returns all user accounts with the specified last name
LogonName	The logon name of the user account	Returns all user accounts with the specified logon name
UserPrincipalName	The user principal name of the user account	Returns all user accounts with the specified user principal name

EmpowerID Person Search Terms

Attribute	Description	Search Result
Name	The name of the person	Returns all people with the specified name
FriendlyName	The friendly or display name of the person	Returns all people with the specified friendly name
Email	The email address of the person	Returns all people with the specified email address
FirstName	The first name of the person	Returns all people with the specified first name
LastName	The last name of the person	Returns all people with the specified last name
Login	The login of the person	Returns all people with the specified login

Group Search Terms

Attribute	Description	Search Result
Name	The name of the group	Returns all groups with the specified name
FriendlyName	The friendly or display name of the group	Returns all groups with the specified friendly name
Email	The email address of the group	Returns all groups with the specified email address
EmpowerIDName	The EmpowerID name of the group	Returns all groups with the specified EmpowerID name
EmpowerIDFriendlyName	The EmpowerID friendly name of the group	Returns all groups with the specified EmpowerID friendly name
LogonName	The logon name of the group	Returns all groups with the specified logon name
NetBiosName	The NetBIOS name of the group	Returns all groups with the specified NetBIOS name
FQN	The FQN of the group	Returns all groups with the specified FQN
DistinguishedName	The distinguished name of the group	Returns all groups with the specified distinguished name
Description	The description of the group	Returns all groups with the specified description

Advanced Search

In addition to using basic search, you can use advanced search when you need to use one or more additional attributes to find what you are looking for. For example, if you want to return all people with the last name of Stone whose account is disabled, you enter Stone as the last name and set the enabled flag to false as shown below.

Each of the terms in the below tables can be combined with each other for more specific searches

User Account Advanced Search Terms

Attribute	Description	Search Result
DisplayName	The display name of the user account	Returns all user accounts with the specified display name
LogonName	The logon name of the user account	Returns all user accounts with the specified logon name
Domain or Directory	The originating domain or directory of the user account	Returns all user accounts with the specified domain
FirstName	The first name of the user account	Returns all user accounts with the specified first name
LastName	The last name of the user account	Returns all user accounts with the specified last name
EmpowerID Login	The login of the EmpowerID Person account linked to the user account	Returns all user accounts with the specified EmpowerID Login
Description	The description of the user account	Returns all user accounts with the specified description
Disabled	The disabled state of the user account; can be true, false, or null	Returns all user accounts with the specified Disabled state
Locked Out	Allows you to search for users who are locked out; can be true, false, or null	Returns all user accounts with the specified locked out condition
Never Logged In	Allows you to search for users who have never logged in; can be true, false, or null	Returns all user accounts with the specified logged in condition
Last Logged In Between	Allows you to search for users whose last log in dates match those specified	Returns all user accounts with the specified last log in dates

Person Advanced Search Terms

Attribute	Description	Search Result
FirstName	The first name of the person	Returns all people with the specified first name
LastName	The last name of the person	Returns all people with the specified last name
Title	The title of the person	Returns all people with the specified title
Department	The department of the person	Returns all people with the specified department
Street Address	The street address of the person	Returns all people with the specified street address
EmpowerID Login	The login of the person	Returns all people with the specified EmpowerID Login
Email	The email address of the person	Returns all people with the specified email address
Enabled	The enabled state of the user account; can be enabled, disabled, or null	Returns all user accounts with the specified state
Manager	Allows you to search for people by manager	Returns all people with the specified manager
Last Logged In Between	Allows you to search for people whose last log in dates match those specified	Returns all people with the specified last log in dates
Valid Until Between	Allows you to search for people whose valid until between dates match those specified	Returns all people with the specified valid until between dates

Group Advanced Search Terms

Attribute	Description	Search Result
DisplayName	The friendly or display name of the group	Returns all groups with the specified display name
LogonName	The logon name of the group	Returns all groups with the specified logon name
Group Type	The type of group, e.g., security universal, distribution, etc.	Returns all groups with the specified group type
By Member	Member of group	Returns all groups where the specified user is a member
By Owner	Owner of group	Returns all groups where the specified user is the owner
Notes	Notes set for the group	Returns all groups containing the specified text
Description	The description of the group	Returns all groups with the specified description
No Members	Allows you to search for groups without members; can be true, false, or null	Returns all groups with the specified membership state
Publish In IT Shop	Allows you to search for groups published in the IT Shop; can be true, false, or null	Returns all groups with the specified publish state
Is High Security Group	Allows you to search for groups flagged as high security; can be true, false, or null	Returns all groups with the specified security state
System Type	Allows you to search for groups belonging to a specific system type, such as Azure	Returns all groups belonging to the specified system type