You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Search for Identities

EmpowerID includes a powerful search engine that allows you to quickly find information about the people and other resources within your organization. Each type of resource, such as user accounts, people, and groups, has a Find page associated with it. Find pages contain a Locations tree, basic and advanced search fields, a grid that displays resource records, and contextual action links that can be used to perform an action against a specific resource object.

As an example, the below image shows what the Find page for user accounts looks like with all user account records returned from a basic search for a specific user.

Figure 1: Using basic search on the Find User Accounts page

 

Using basic search like that shown above is helpful when you know which users you are searching for. Simply enter a search term, such as the name or logon name of the user and EmpowerID returns the exact record(s) related to the search term. In scenarios where you need to return records for multiple users, you can use the advanced search features, the Locations tree, or a combination of both. For example, if you want to see all user accounts in a specific domain or directory, you can search for and select that domain from the Locations tree as shown in Figure 2 or enter it into the Domain or Directory field of the advanced search feature as shown in Figure 3.

Figure 2: Using the Locations tree to return all user accounts in the selected location

 

 

Searchable Fields

Each type of identity object stored in the EmpowerID Identity Warehouse is searchable based on a set of search terms relevant to the type of object. Each search term is linked to an attribute that correlates to the object. To successfully find identities using basic search, the search terms entered into the basic search field on the related Find pages must match an allowable attribute. These are listed by identity type in the below tables.

User Account Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

Name

The name of the user account

Returns all user accounts with the specified name

FriendlyName

The friendly or display name of the user account

Returns all user accounts with the specified friendly name

Email

The email address of the user account

Returns all user accounts with the specified email address

FirstName

The first name of the user account

Returns all user accounts with the specified first name

LastName

The last name of the user account

Returns all user accounts with the specified last name

LogonName

The logon name of the user account

Returns all user accounts with the specified logon name

UserPrincipalName

The user principal name of the user account

Returns all user accounts with the specified user principal name

EmpowerID Person Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

Name

The name of the person

Returns all people with the specified name

FriendlyName

The friendly or display name of the person

Returns all people with the specified friendly name

Email

The email address of the person

Returns all people with the specified email address

FirstName

The first name of the person

Returns all people with the specified first name

LastName

The last name of the person

Returns all people with the specified last name

Login

The login of the person

Returns all people with the specified login

Group Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

Name

The name of the group

Returns all groups with the specified name

FriendlyName

The friendly or display name of the group

Returns all groups with the specified friendly name

Email

The email address of the group

Returns all groups with the specified email address

EmpowerIDName

The EmpowerID name of the group

Returns all groups with the specified EmpowerID name

EmpowerIDFriendlyName

The EmpowerID friendly name of the group

Returns all groups with the specified EmpowerID friendly name

LogonName

The logon name of the group

Returns all groups with the specified logon name

NetBiosName

The NetBIOS name of the group

Returns all groups with the specified NetBIOS name

FQN

The FQN of the group

Returns all groups with the specified FQN

DistinguishedName

The distinguished name of the group

Returns all groups with the specified distinguished name

Description

The description of the group

Returns all groups with the specified description

 

Advanced Search

In addition to using basic search, you can use advanced search when you need to use one or more additional attributes to find what you are looking for. For example, if you want to return all people with the last name of Stone whose account is disabled, you enter Stone as the last name and set the enabled flag to false as shown below.

 

Each of the terms in the below tables can be combined with each other for more specific searches

User Account Advanced Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

DisplayName

The display name of the user account

Returns all user accounts with the specified display name

LogonName

The logon name of the user account

Returns all user accounts with the specified logon name

Domain or Directory

The originating domain or directory of the user account

Returns all user accounts with the specified domain

FirstName

The first name of the user account

Returns all user accounts with the specified first name

LastName

The last name of the user account

Returns all user accounts with the specified last name

EmpowerID Login

The login of the EmpowerID Person account linked to the user account

Returns all user accounts with the specified EmpowerID Login

Description

The description of the user account

Returns all user accounts with the specified description

Disabled

The disabled state of the user account; can be true, false, or null

Returns all user accounts with the specified Disabled state

Locked Out

Allows you to search for users who are locked out; can be true, false, or null

Returns all user accounts with the specified locked out condition

Never Logged In

Allows you to search for users who have never logged in; can be true, false, or null

Returns all user accounts with the specified logged in condition

Last Logged In Between

Allows you to search for users whose last log in dates match those specified

Returns all user accounts with the specified last log in dates

 

Person Advanced Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

FirstName

The first name of the person

Returns all people with the specified first name

LastName

The last name of the person

Returns all people with the specified last name

Title

The title of the person

Returns all people with the specified title

Department

The department of the person

Returns all people with the specified department

Street Address

The street address of the person

Returns all people with the specified street address

EmpowerID Login

The login of the person

Returns all people with the specified EmpowerID Login

Email

The email address of the person

Returns all people with the specified email address

Enabled

The enabled state of the user account; can be enabled, disabled, or null

Returns all user accounts with the specified state

Manager

Allows you to search for people by manager

Returns all people with the specified manager

Last Logged In Between

Allows you to search for people whose last log in dates match those specified

Returns all people with the specified last log in dates

Valid Until Between

Allows you to search for people whose valid until between dates match those specified

Returns all people with the specified valid until between dates

 

Group Advanced Search Terms

Attribute

Description

Search Result

Attribute

Description

Search Result

DisplayName

The friendly or display name of the group

Returns all groups with the specified display name

LogonName

The logon name of the group

Returns all groups with the specified logon name

Group Type

The type of group, e.g., security universal, distribution, etc.

Returns all groups with the specified group type

By Member

Member of group

Returns all groups where the specified user is a member

By Owner

Owner of group

Returns all groups where the specified user is the owner

Notes

Notes set for the group

Returns all groups containing the specified text

Description

The description of the group

Returns all groups with the specified description

No Members

Allows you to search for groups without members; can be true, false, or null

Returns all groups with the specified membership state

Publish In IT Shop

Allows you to search for groups published in the IT Shop; can be true, false, or null

Returns all groups with the specified publish state

Is High Security Group

Allows you to search for groups flagged as high security; can be true, false, or null

Returns all groups with the specified security state

System Type

Allows you to search for groups belonging to a specific system type, such as Azure

Returns all groups belonging to the specified system type