Working with the global filter

  • Article

 

Applies To: Forefront Identity Manager

In addition to rule-specific subset filters, the BHOLD Analytics module of Microsoft BHOLD Suite Service Pack 1 (SP1) provides for a global filter that is applied to all rules in all rulesets. This allows you to create a filter that excludes users in your BHOLD role model that are not relevant for the purposes of your analysis. For example, you can exclude such items as permissions that are still under construction or roles that are linked to permissions for an application that is not yet deployed in your organization.

The global filter is essentially identical to rule-specific subset filters except that it applies to all rules. Also, unlike subset filters, you can enable or disable the global filter before performing a rule analysis. As with subset filters, filter expressions are joined by an implicit logical AND unless you select the Use OR check box to join them with a logical OR.

Important

The filter rules of the global filter must refer to object types in the BHOLD role-model schema. If you remove object types that are referenced in the global filter, you must remove the rules that refer to the object types that were removed before creating a report for any rule.

This topic contains the following procedures:

  • Creating the global filter

  • Turning on the global filter

  • Editing the global filter

All of the procedures in this topic are performed by using the BHOLD Analytics portal. To open the BHOLD Analytics portal, log on the computer where BHOLD Analytics is installed by using the root account or another account with the necessary BHOLD permissions, and then double-click the Microsoft BHOLD Suite—Analytics shortcut on the desktop. If the shortcut is not available, open a web browser and then type the following URL into the address bar:

https:// <server> : <port> /BHOLD/Analytics

where <server> is the name or IP address of the server running BHOLD Core and BHOLD Analytics, and <port> is the port number that was specified when BHOLD Core was installed.

Creating the global filter

Initially, the global filter does not contain any filter rules. To create the global filter, add one or more filter rules.

To create the global filter

  1. In the BHOLD Analytics portal, under Global Filters, click Edit.

  2. In the Global Filters dialog box, do the following as needed to add filter expressions to the global filter:

    1. Click Add Filter.

    2. In the Filter Properties dialog box, in the Type list, click the expression type, select or type the parts of the filter expression, and then click Save.

      Note

      The parts of the filter expression vary depending on the expression type. Also, certain operators allow you to enter more than one value.

  3. To close the Global Filters dialog box, click the X in the top-right corner.

Turning on the global filter

The global filter must be turned on (enabled) to affect rule analysis. When the global filter is turned on, a green circle appears next to Global Filters in the left pane of the BHOLD Analytics portal.

To turn on the global filter

  • In the BHOLD Analytics portal, under Global Filters, click Turn On.

To turn off (disable) the global filter, click Turn Off.

Editing the global filter

You can add filter expressions to the global filter, and you can modify or delete existing expressions.

To edit the global filter

  1. In the BHOLD Analytics portal, under Global Filters, click Edit.

  2. In the Global Filters dialog box, do one or more of the following:

    • To add a filter expression, click Add Filter.

    • To edit an existing filter expression, point to the filter expression, and then, when the buttons appear, click the Edit button.

    • To delete an existing filter expression, point to the filter expression, and then, when the buttons appear, click the Delete button.

  3. To close the Global Filters dialog box, click the X in the top-right corner.

See also