Searching for Identities

EmpowerID's search engine is a powerful tool designed to help users easily locate information about various resources within their organization. This search engine streamlines the process of finding specific data related to user accounts, people, and groups, among other resource types.

Each resource type has its own dedicated Find page, which offers a range of helpful features to assist users in their search. These features include a Locations tree for easy navigation, basic and advanced search fields for precise queries, a grid that displays resource records, and contextual action links that allow users to perform actions on the identified resources.

To ensure a more manageable search experience, EmpowerID's search engine provides two search options on the Find pages: basic search and advanced search. The basic search option is particularly useful when looking for a specific user account. Users can simply input a search term, such as the user's name or logon name, and EmpowerID will return the exact record(s) associated with that search term.

The advanced search feature, on the other hand, offers more refined search capabilities, including the ability to search by location. By utilizing these advanced options, users can tailor their search queries to yield more accurate and relevant results, ultimately making it easier to find and manage resources within their organization.

Figure 1: Using basic search on the Find User Accounts page

Figure 2: Using the Locations tree to return all user accounts in the selected location

Figure 3: Using advanced search to find accounts in a specific domain or directory

Searchable Fields

EmpowerID's Identity Warehouse stores each type of identity object and is searchable based on a set of relevant search terms linked to an attribute that correlates to the object. For successful basic search results, the search terms must match allowable attributes, which are listed by identity type in the tables provided below.

User Account Search Terms

Attribute	Description	Search Result
Name	The name of the user account	Returns all user accounts with the specified name
FriendlyName	The friendly or display name of the user account	Returns all user accounts with the specified friendly name
Email	The email address of the user account	Returns all user accounts with the specified email address
FirstName	The first name of the user account	Returns all user accounts with the specified first name
LastName	The last name of the user account	Returns all user accounts with the specified last name
LogonName	The logon name of the user account	Returns all user accounts with the specified logon name
UserPrincipalName	The user principal name of the user account	Returns all user accounts with the specified user principal name

EmpowerID Person Search Terms

Attribute	Description	Search Result
Name	The name of the person	Returns all people with the specified name
FriendlyName	The friendly or display name of the person	Returns all people with the specified friendly name
Email	The email address of the person	Returns all people with the specified email address
FirstName	The first name of the person	Returns all people with the specified first name
LastName	The last name of the person	Returns all people with the specified last name
Login	The login of the person	Returns all people with the specified login

Group Search Terms

Attribute	Description	Search Result
Name	The name of the group	Returns all groups with the specified name
FriendlyName	The friendly or display name of the group	Returns all groups with the specified friendly name
Email	The email address of the group	Returns all groups with the specified email address
EmpowerIDName	The EmpowerID name of the group	Returns all groups with the specified EmpowerID name
EmpowerIDFriendlyName	The EmpowerID friendly name of the group	Returns all groups with the specified EmpowerID friendly name
LogonName	The logon name of the group	Returns all groups with the specified logon name
NetBiosName	The NetBIOS name of the group	Returns all groups with the specified NetBIOS name
FQN	The FQN of the group	Returns all groups with the specified FQN
DistinguishedName	The distinguished name of the group	Returns all groups with the specified distinguished name
Description	The description of the group	Returns all groups with the specified description

Advanced Search

In addition to using basic search, you can use advanced search when you need to use one or more additional attributes to find what you are looking for. For example, if you want to return all people with the last name of Stone whose account is disabled, you enter Stone as the last name and set the enabled flag to false, as shown below.

tip

Each of the terms in the below tables can be combined with each other for more specific searches

User Account Advanced Search Terms

Attribute	Description	Search Result
DisplayName	The display name of the user account	Returns all user accounts with the specified display name
LogonName	The logon name of the user account	Returns all user accounts with the specified logon name
Domain or Directory	The originating domain or directory of the user account	Returns all user accounts with the specified domain
FirstName	The first name of the user account	Returns all user accounts with the specified first name
LastName	The last name of the user account	Returns all user accounts with the specified last name
EmpowerID Login	The login of the EmpowerID Person account linked to the user account	Returns all user accounts with the specified EmpowerID Login
Description	The description of the user account	Returns all user accounts with the specified description
Disabled	The disabled state of the user account; can be true, false, or null	Returns all user accounts with the specified Disabled state
Locked Out	Allows you to search for users who are locked out; can be true, false, or null	Returns all user accounts with the specified locked out condition
Never Logged In	Allows you to search for users who have never logged in; can be true, false, or null	Returns all user accounts with the specified logged in condition
Last Logged In Between	Allows you to search for users whose last log in dates match those specified	Returns all user accounts with the specified last log in dates

Person Advanced Search Terms

Attribute	Description	Search Result
FirstName	The first name of the person	Returns all people with the specified first name
LastName	The last name of the person	Returns all people with the specified last name
Title	The title of the person	Returns all people with the specified title
Department	The department of the person	Returns all people with the specified department
Street Address	The street address of the person	Returns all people with the specified street address
EmpowerID Login	The login of the person	Returns all people with the specified EmpowerID Login
Email	The email address of the person	Returns all people with the specified email address
Enabled	The enabled state of the user account; can be enabled, disabled, or null	Returns all user accounts with the specified state
Manager	Allows you to search for people by manager	Returns all people with the specified manager
Last Logged In Between	Allows you to search for people whose last log in dates match those specified	Returns all people with the specified last log in dates
Valid Until Between	Allows you to search for people whose valid until between dates match those specified	Returns all people with the specified valid until between dates

Group Advanced Search Terms

Attribute	Description	Search Result
DisplayName	The friendly or display name of the group	Returns all groups with the specified display name
LogonName	The logon name of the group	Returns all groups with the specified logon name
Group Type	The type of group, e.g., security universal, distribution, etc.	Returns all groups with the specified group type
By Member	Member of group	Returns all groups where the specified user is a member
By Owner	Owner of group	Returns all groups where the specified user is the owner
Notes	Notes set for the group	Returns all groups containing the specified text
Description	The description of the group	Returns all groups with the specified description
No Members	Allows you to search for groups without members; can be true, false, or null	Returns all groups with the specified membership state
Publish In IT Shop	Allows you to search for groups published in the IT Shop; can be true, false, or null	Returns all groups with the specified publish state
Is High Security Group	Allows you to search for groups flagged as high security; can be true, false, or null	Returns all groups with the specified security state
System Type	Allows you to search for groups belonging to a specific system type, such as Azure	Returns all groups belonging to the specified system type