Filtering users and accounts
Bravura Security Fabric uses ID filters to include or exclude users (profile IDs) and accounts (long IDs) from a target system. The filters are applied during the auto discovery process when accounts are imported.
For example, configure Bravura Security Fabric to filter IDs if:
You want to prevent Bravura Security Fabric from creating profiles for certain administrative accounts.
The total number of profile IDs exceeds the number of users you are licensed for.
You want to prevent users from attaching accounts that are used for specific purposes on a system. For example, you may want to prevent users from attaching an nt_guest account on a Windows NT system.
You want to prevent Bravura Identity from creating users and accounts with certain IDs.
Default behavior is affected by the Use ID filters to include only certain users and accounts checkbox, located on the page .
When the Use ID filters to include only certain users and accounts option is:
Not selected – Bravura Security Fabric imports all IDs except those that have been explicitly excluded by an ID filter.
Selected – No accounts are imported. You must set up an ID filter to explicitly include certain IDs.
Use the Manage ID filters page to identify account IDs that you want or don’t want managed by Bravura Security Fabric , or to be included or excluded from a source of profile IDs.
When filtering on target systems, you use the Include in system option to create an inclusion or exclusion list.
An ID is “excluded” if it matches a Pattern on the Manage ID filters page and the corresponding Include in system checkbox is not selected.
Bravura Identity prevents users from creating accounts with an ID that matches an excluded ID pattern.
An ID is “included” if it matches a Pattern on the Manage ID filters page and the corresponding Include in system checkbox is selected.
When filtering on profile IDs, the Include in system option does not apply. If Use ID filters to include only certain users and accounts is selected for a target system, then the filter acts as an inclusion list. If the setting is not selected, the filter acts as an exclusion list.
See also
You can also use a script to import a list of IDs to filter .