Shine a light on shadow apps

ConductorOne Docs

Scope a campaign

When preparing an access review campaign, you can fine-tune the campaign's scope using campaign parameters. This allows you to focus on only essential access reviews.

Using custom profile attributes to narrow the scope of a campaign

Profile attributes are key/value pairs of data sourced from identities in applications. Set up user key mappings to pull additional profile attributes from your application identities and use this information to narrow the scope of your campaign.

Here’s an example. You want to run an access review campaign on all the AcmeApp users in your company with the job title “Engineer.” First you map the AcmeApp profile key “jobTitle” to the key of your choice (you choose “AcmeJob”) in ConductorOne. Then, when creating the campaign, you create the parameter User AcmeJob is Engineer. This parameter limits the scope of the campaign so that only entitlements for users matching the parameter will be included in your access review campaign.

Create custom profile attributes

To create custom parameters that you can use to adjust the scope of your campaign, you first need to create the custom profile attributes that will be used in your parameters.

Step 1: Map key user attributes

Follow the instructions in Map key user attributes.

Step 2: Use keys to narrow campaign scope

  1. While setting up a campaign, on the Scope tab, click Edit in the Set campaign parameters area of the page.

  2. Click Add parameter.

  3. From the Object type menu, select User or Account. These are the only object types currently supported.

  4. From the Attribute type menu, select one of the user keys you established in Step 1.

  5. In the Attribute value field, enter the value you want to focus on in your campaign.

  6. If needed, repeat these steps to add additional parameters.

  7. Click Save.