Source: projects/identity-management/oim-kb-update/sandbox-db/2026-04-27-itshopinfo-validation-and-qer-itshop-config-db-evidence.md
> Source: projects/identity-management/oim-kb-update/sandbox-db/2026-04-27-itshopinfo-validation-and-qer-itshop-config-db-evidence.md
Sandbox DB Evidence — ITShopInfo validation + QER\ITShop config params (2026-04-27)
Method
- Sandbox DB:
OneIMonim.sandbox.local - Tooling:
scripts/sandbox/Invoke-SandboxSql.ps1(SELECT-only)
Evidence
1) IT Shop subtree: ITShopInfo distribution
Query:
SELECT ITShopInfo, COUNT(*) AS Cnt
FROM BaseTree
WHERE UID_OrgRoot = 'QER-V-ITShopOrg'
GROUP BY ITShopInfo
ORDER BY Cnt DESC, ITShopInfo;Result:
[
{
"ITShopInfo": "PR",
"Cnt": 113
},
{
"ITShopInfo": "BO",
"Cnt": 8
},
{
"ITShopInfo": "CU",
"Cnt": 1
},
{
"ITShopInfo": "SH",
"Cnt": 1
}
]2) ITShopOrg is a view (definition)
Query:
SELECT OBJECT_DEFINITION(OBJECT_ID('dbo.ITShopOrg')) AS ViewDefinition;Result:
create view dbo.ITShopOrg as
select
ApprovalState as ApprovalState,
Commentary as Commentary,
CustomProperty01 as CustomProperty01,
CustomProperty02 as CustomProperty02,
CustomProperty03 as CustomProperty03,
CustomProperty04 as CustomProperty04,
CustomProperty05 as CustomProperty05,
CustomProperty06 as CustomProperty06,
CustomProperty07 as CustomProperty07,
CustomProperty08 as CustomProperty08,
CustomProperty09 as CustomProperty09,
CustomProperty10 as CustomProperty10,
Description as Description,
FullPath as FullPath,
Ident_Org as Ident_Org,
InternalName as InternalName,
IsCutNode as IsCutNode,
IsInvalidForDynamicGroup as IsInvalidForDynamicGroup,
ITShopInfo as ITShopInfo,
treelevel as treelevel,
UID_AccProduct as UID_AccProduct,
UID_AERoleManager as UID_AERoleManager,
UID_DialogCountry as UID_DialogCountry,
UID_DialogState as UID_DialogState,
UID_Org as UID_ITShopOrg,
UID_OrgAttestator as UID_OrgAttestator,
UID_OrgBoardTemplate as UID_OrgBoardTemplate,
UID_OrgDepartment as UID_Department,
UID_OrgLocality as UID_Locality,
UID_OrgProfitCenter as UID_ProfitCenter,
UID_OrgRoot as UID_OrgRoot,
UID_OrgType as UID_OrgType,
UID_ParentOrg as UID_ParentITShopOrg,
UID_PersonHead as UID_PersonHead,
UID_PersonHeadSecond as UID_PersonHeadSecond,
UID_PWODecisionMethod as UID_PWODecisionMethod,
XDateInserted as XDateInserted,
XDateUpdated as XDateUpdated,
XMarkedForDeletion as XMarkedForDeletion,
XObjectKey as XObjectKey,
XTouched as XTouched,
XUserInserted as XUserInserted,
XUserUpdated as XUserUpdated
from BaseTree
where UID_OrgRoot = 'QER-V-ITShopOrg'3) ITShopOrg view: column inventory
Query:
SELECT c.name AS ColumnName
FROM sys.columns c
WHERE c.object_id = OBJECT_ID('dbo.ITShopOrg')
ORDER BY c.column_id;Result:
[
{
"ColumnName": "ApprovalState"
},
{
"ColumnName": "Commentary"
},
{
"ColumnName": "CustomProperty01"
},
{
"ColumnName": "CustomProperty02"
},
{
"ColumnName": "CustomProperty03"
},
{
"ColumnName": "CustomProperty04"
},
{
"ColumnName": "CustomProperty05"
},
{
"ColumnName": "CustomProperty06"
},
{
"ColumnName": "CustomProperty07"
},
{
"ColumnName": "CustomProperty08"
},
{
"ColumnName": "CustomProperty09"
},
{
"ColumnName": "CustomProperty10"
},
{
"ColumnName": "Description"
},
{
"ColumnName": "FullPath"
},
{
"ColumnName": "Ident_Org"
},
{
"ColumnName": "InternalName"
},
{
"ColumnName": "IsCutNode"
},
{
"ColumnName": "IsInvalidForDynamicGroup"
},
{
"ColumnName": "ITShopInfo"
},
{
"ColumnName": "treelevel"
},
{
"ColumnName": "UID_AccProduct"
},
{
"ColumnName": "UID_AERoleManager"
},
{
"ColumnName": "UID_DialogCountry"
},
{
"ColumnName": "UID_DialogState"
},
{
"ColumnName": "UID_ITShopOrg"
},
{
"ColumnName": "UID_OrgAttestator"
},
{
"ColumnName": "UID_OrgBoardTemplate"
},
{
"ColumnName": "UID_Department"
},
{
"ColumnName": "UID_Locality"
},
{
"ColumnName": "UID_ProfitCenter"
},
{
"ColumnName": "UID_OrgRoot"
},
{
"ColumnName": "UID_OrgType"
},
{
"ColumnName": "UID_ParentITShopOrg"
},
{
"ColumnName": "UID_PersonHead"
},
{
"ColumnName": "UID_PersonHeadSecond"
},
{
"ColumnName": "UID_PWODecisionMethod"
},
{
"ColumnName": "XDateInserted"
},
{
"ColumnName": "XDateUpdated"
},
{
"ColumnName": "XMarkedForDeletion"
},
{
"ColumnName": "XObjectKey"
},
{
"ColumnName": "XTouched"
},
{
"ColumnName": "XUserInserted"
},
{
"ColumnName": "XUserUpdated"
}
]4) BaseTree triggers (QER_T*BaseTree*)
Query:
SELECT t.name AS TriggerName, t.is_disabled AS IsDisabled, t.create_date AS CreateDate, t.modify_date AS ModifyDate
FROM sys.triggers t
WHERE t.parent_id = OBJECT_ID('dbo.BaseTree')
AND t.name LIKE 'QER_T%BaseTree%'
ORDER BY t.name;Result:
[
{
"TriggerName": "QER_TDBaseTree",
"IsDisabled": false,
"CreateDate": "2025-06-27T18:01:07.743",
"ModifyDate": "2026-04-14T23:23:07.96"
},
{
"TriggerName": "QER_TIBaseTree",
"IsDisabled": false,
"CreateDate": "2025-06-27T18:01:07.753",
"ModifyDate": "2026-04-14T23:23:07.96"
},
{
"TriggerName": "QER_TUBaseTree",
"IsDisabled": false,
"CreateDate": "2025-06-27T18:01:07.793",
"ModifyDate": "2026-04-14T23:23:07.96"
}
]5) Trigger excerpts around ITShopInfo / RAISERROR
Query:
DECLARE @dTI NVARCHAR(MAX) = OBJECT_DEFINITION(OBJECT_ID('dbo.QER_TIBaseTree'));
DECLARE @dTU NVARCHAR(MAX) = OBJECT_DEFINITION(OBJECT_ID('dbo.QER_TUBaseTree'));
SELECT
'QER_TIBaseTree' AS Obj,
CASE WHEN CHARINDEX('ITShopInfo', @dTI) > 0 THEN SUBSTRING(@dTI, CHARINDEX('ITShopInfo', @dTI) - 200, 900) ELSE NULL END AS Snip_ITShopInfo,
CASE WHEN CHARINDEX('RAISERROR', @dTI) > 0 THEN SUBSTRING(@dTI, CHARINDEX('RAISERROR', @dTI) - 200, 900) ELSE NULL END AS Snip_RaiseError
UNION ALL
SELECT
'QER_TUBaseTree' AS Obj,
CASE WHEN CHARINDEX('ITShopInfo', @dTU) > 0 THEN SUBSTRING(@dTU, CHARINDEX('ITShopInfo', @dTU) - 200, 900) ELSE NULL END AS Snip_ITShopInfo,
CASE WHEN CHARINDEX('RAISERROR', @dTU) > 0 THEN SUBSTRING(@dTU, CHARINDEX('RAISERROR', @dTU) - 200, 900) ELSE NULL END AS Snip_RaiseError;Result:
[
{
"Obj": "QER_TIBaseTree",
"Snip_ITShopInfo": "DBQueueRaw insert into @DBQueueElements_05 (object, subobject, genprocid) select x.uid, null, @GenProcID\r\n from ( select i.uid_org as uid from inserted i where i.uid_orgroot = 'QER-V-ITShopOrg' and i.itshopinfo in ('SC', 'SH', 'BO', 'PR') ) as x exec QBM_PDBQueueInsert_Bulk\r\n 'QER-K-ShoppingRack-All', @DBQueueElements_05 if exists (select top 1 1 from inserted i where i.ITShopInfo > ' ' and i.UID_OrgRoot not in ('QER-V-ITShopOrg'\r\n, 'QER-V-ITShopSrc') ) begin raiserror('#LDS#Cannot set IT Shop information, because role class is not suitable for IT Shop.|', 18, 2) with nowait end\r\n if exists (select top 1 1 from inserted i left outer join BaseTree p on i.UID_ParentOrg = p.UID_Org and i.UID_OrgRoot = p.UID_OrgRoot where i.UID_ParentOrg\r\n > ' ' and p.UID_Org is null ) begin raiserror( '#LDS#Cannot insert node, because predecessor does not exist in the same role class.|', 18, 2) with nowa",
"Snip_RaiseError": "char(38) select @GenProcID = dbo.QBM_FGISessionContext('') if exists (select top 1 1 from inserted i join DialogGroup\r\n g on i.UID_DialogGroup = g.UID_DialogGroup where g.IsRoleBasedOnly = 0 ) begin raiserror( '#LDS#Assigment is only permitted for DialogGroup.IsRoleBasedOnly true.|'\r\n, 18, 2) with nowait end declare @DBQueueElements_01 QBM_YDBQueueRaw insert into @DBQueueElements_01 (object, subobject, genprocid) \r\nselect x.uid, null, @GenProcID from ( select i.uid_org as uid from inserted i ) as x exec QBM_PDBQueueInsert_Bulk 'QER-K-OrgTreeLEVEL', @DBQueueElements_01\r\n declare @DBQueueElements_02 QBM_YDBQueueRaw insert into @DBQueueElements_02 (object, subobject, genprocid) select x.uid, null, @GenProcID from ( select\r\n i.uid_org as uid from inserted i ) as x exec QBM_PDBQueueInsert_Bulk 'QER-K-OrgInherite', @DBQueueElements_02 insert into BaseTreeCollectionF (UID"
},
{
"Obj": "QER_TUBaseTree",
"Snip_ITShopInfo": " declare @alt_uid_Parentorg varchar(38) declare @neu_uid_Parentorg varchar(38) declare @Ordernumber int declare @OL_only_Upper bit declare \r\n@alt_isCutNode bit declare @neu_isCutNode bit declare @alt_ITShopInfo nvarchar(2) declare @neu_ITShopInfo nvarchar(2) declare @alt_ident_orgtype nvarchar\r\n(64) declare @neu_ident_orgtype nvarchar(64) declare @IsTopDown bit declare @QER_ITShop_OnWorkflowAssign varchar(16) if update(UID_PWODecisionMethod) begin\r\n select @QER_ITShop_OnWorkflowAssign = dbo.QBM_FGIConfigparmValue('QER\\ITShop\\OnWorkflowAssign') if @QER_ITShop_OnWorkflowAssign in ('RESET', 'ABORT') \r\nbegin declare @DBQueueElements_01 QBM_YDBQueueRaw insert into @DBQueueElements_01(Object, SubObject, GenProcID) select x.uid, null, @GenProcID from ( select\r\n pwo.UID_PersonWantsOrg as uid from BaseTree b join deleted d on b.UID_Org = d.UID_Org and isnull(b.UID_PWODecisionMethod, '') <> isnul",
"Snip_RaiseError": "1 1 from deleted d join BaseTree b on d.UID_Org = b.UID_Org join DynamicGroup g on b.XObjectKey\r\n = g.ObjectKeyBaseTree where d.IsInvalidForDynamicGroup = 0 and b.IsInvalidForDynamicGroup = 1 ) begin raiserror( '#LDS#Change of IsInvalidForDynamicGroup is invalid because element is used for dynamic groups.|'\r\n, 18, 1) with nowait end end if update(UID_DialogGroup) begin if exists (select top 1 1 from inserted i join DialogGroup g on i.UID_DialogGroup = g.UID_DialogGroup\r\n where g.IsRoleBasedOnly = 0 ) begin raiserror('#LDS#Assigment is only permitted for DialogGroup.IsRoleBasedOnly true.|', 18, 2) with nowait end declare\r\n @DBQueueElements_03 QBM_YDBQueueRaw insert into @DBQueueElements_03 (object, subobject, genprocid) select x.uid, null, @GenProcID from ( select distinct\r\n pio.uid_person as uid from BaseTree b join deleted d on b.uid_org = d.uid_org and isnull(b.UID_DialogGroup, '') "
}
]6) QER_PITShop* objects (inventory)
Query:
SELECT o.name AS ObjectName, o.type_desc AS TypeDesc
FROM sys.objects o
WHERE o.name LIKE 'QER_PITShop%'
AND o.type IN ('P','FN','TF','IF','V')
ORDER BY o.type_desc, o.name;Result:
[
{
"ObjectName": "QER_PITShop_BoardMove",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShop_PRNodesMove",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShop_ShopMove",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopBoardPrepareDelete",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopCheckMethodBO",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopHelperFill",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopHelperFill_bulk",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopHelperFill_Recalc",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopHelperFillAll",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopOrderHistoryInsert",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopOrderMove",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopOrderMove_bulk",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopOrderResetOneLevel",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopPersonHasObjectFill",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopPersonHasObjFill_b",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopProductNodeCheck",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopProductNodeCreate",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopProductNodeCreate_b",
"TypeDesc": "SQL_STORED_PROCEDURE"
},
{
"ObjectName": "QER_PITShopProductNodeMove",
"TypeDesc": "SQL_STORED_PROCEDURE"
}
]7) QER_PITShop_ShopMove excerpt (SC validation)
Query:
DECLARE @d NVARCHAR(MAX) = OBJECT_DEFINITION(OBJECT_ID('dbo.QER_PITShop_ShopMove'));
SELECT
'QER_PITShop_ShopMove' AS Obj,
CASE WHEN CHARINDEX('ITShopInfo = ''SC''', @d) > 0 THEN SUBSTRING(@d, CHARINDEX('ITShopInfo = ''SC''', @d) - 220, 900) ELSE NULL END AS Snip_TargetMustBeSC,
CASE WHEN CHARINDEX('The given target node is not a shopping center', @d) > 0 THEN SUBSTRING(@d, CHARINDEX('The given target node is not a shopping center', @d) - 120, 400) ELSE NULL END AS Snip_ErrorText;Result:
{
"Obj": "QER_PITShop_ShopMove",
"Snip_TargetMustBeSC": "f @uid_orgCU_Source is null begin raiserror\r\n( '#LDS#The customer node cannot be found in shop (source).|', 18, 2) with nowait end if not exists (select top 1 1 from BaseTree where uid_OrgRoot = \r\n'QER-V-ITShopOrg' and ITShopInfo = 'SC' and uid_Org = @UID_OrgSCTarget ) begin raiserror( '#LDS#The given target node is not a shopping center.|', 18,\r\n 2) with nowait end if isnull(@UID_OrgSC_Source, '') = @UID_OrgSCTarget begin goto ende end if not exists (select top 1 1 from BaseTree where uid_OrgRoot\r\n = 'QER-V-ITShopOrg' and ITShopInfo = 'SH' and uid_Org = @UID_OrgSHSource and dbo.QBM_FGIGuidIsValid(uid_Org) & 2 = 0 ) begin raiserror( '#LDS#The given shop (source) must not be moved to another shoping center.|'\r\n, 18, 2) with nowait end if exists (select top 1 1 from BaseTree targetSH where targetSH.uid_OrgRoot = 'QER-V-ITShopOrg' and targetSH.ITShopInfo = 'SH'\r\n and targetSH.uid_Pare",
"Snip_ErrorText": " where uid_OrgRoot = \r\n'QER-V-ITShopOrg' and ITShopInfo = 'SC' and uid_Org = @UID_OrgSCTarget ) begin raiserror( '#LDS#The given target node is not a shopping center.|', 18,\r\n 2) with nowait end if isnull(@UID_OrgSC_Source, '') = @UID_OrgSCTarget begin goto ende end if not exists (select top 1 1 from BaseTree where uid_OrgRoot\r\n = 'QER-V-ITShopOrg' and ITShopInfo = 'SH' and uid_Org = @UID_OrgS"
}8) DialogConfigParm: column inventory
Query:
SELECT c.name AS ColumnName
FROM sys.columns c
WHERE c.object_id = OBJECT_ID('dbo.DialogConfigParm')
ORDER BY c.column_id;Result:
[
{
"ColumnName": "UID_ConfigParm"
},
{
"ColumnName": "ConfigParm"
},
{
"ColumnName": "Value"
},
{
"ColumnName": "Enabled"
},
{
"ColumnName": "XDateInserted"
},
{
"ColumnName": "XDateUpdated"
},
{
"ColumnName": "XUserInserted"
},
{
"ColumnName": "XUserUpdated"
},
{
"ColumnName": "UID_ParentConfigparm"
},
{
"ColumnName": "FullPath"
},
{
"ColumnName": "XTouched"
},
{
"ColumnName": "IsPreprocessorCondition"
},
{
"ColumnName": "IsCrypted"
},
{
"ColumnName": "Description"
},
{
"ColumnName": "XObjectKey"
},
{
"ColumnName": "DisplayName"
},
{
"ColumnName": "SortOrder"
},
{
"ColumnName": "IsEnabledResulting"
},
{
"ColumnName": "XMarkedForDeletion"
},
{
"ColumnName": "UID_QBMClrTypeEditor"
}
]9) Config parameters under QER\\ITShop*
Query (how many total):
SELECT COUNT(*) AS Cnt
FROM DialogConfigParm
WHERE FullPath LIKE 'QER\ITShop%';Result:
{
"Cnt": 97
}Query (key nodes: ITSHOP gate + AutoPublish ADSGroup):
SELECT FullPath, Value, Enabled, IsEnabledResulting, IsPreprocessorCondition, IsCrypted, Description
FROM DialogConfigParm
WHERE FullPath IN (
'QER\ITShop',
'QER\ITShop\AutoPublish',
'QER\ITShop\AutoPublish\ADSGroup',
'QER\ITShop\AutoPublish\ADSGroup\AutoFillDisplayName',
'QER\ITShop\AutoPublish\ADSGroup\ExcludeList',
'QER\ITShop\Templates'
)
ORDER BY FullPath;Result:
[
{
"FullPath": "QER\\ITShop",
"Value": "1",
"Enabled": true,
"IsEnabledResulting": true,
"IsPreprocessorCondition": true,
"IsCrypted": false,
"Description": "Preprocessor relevant configuration parameter for controlling the database model components for the IT Shop. If the parameter is set, IT Shop components are available. Changes to the parameter require recompiling the database."
},
{
"FullPath": "QER\\ITShop\\AutoPublish",
"Value": "1",
"Enabled": true,
"IsEnabledResulting": true,
"IsPreprocessorCondition": false,
"IsCrypted": false,
"Description": "General configuration parameter defining automatically assignments of system entitlements to IT shop."
},
{
"FullPath": "QER\\ITShop\\AutoPublish\\ADSGroup",
"Value": "1",
"Enabled": false,
"IsEnabledResulting": false,
"IsPreprocessorCondition": true,
"IsCrypted": false,
"Description": "Preprocessor relevant configuration parameter for automatically adding Active Directory groups to the IT shop. If the parameter is set, all groups are automatically assigned as products to the IT shop. Changes to the parameter require recompiling the database."
},
{
"FullPath": "QER\\ITShop\\AutoPublish\\ADSGroup\\AutoFillDisplayName",
"Value": "1",
"Enabled": false,
"IsEnabledResulting": false,
"IsPreprocessorCondition": false,
"IsCrypted": false,
"Description": "Decision if the template on ADSGroup.DisplayName should act."
},
{
"FullPath": "QER\\ITShop\\AutoPublish\\ADSGroup\\ExcludeList",
"Value": ".*Administrator.*|Exchange.*|.*Admins|.*Operators|IIS_IUSRS",
"Enabled": true,
"IsEnabledResulting": false,
"IsPreprocessorCondition": false,
"IsCrypted": false,
"Description": "List of system entitlements to be excluded from automatic assignment to the IT Shop. Each entry is part of a regular expression and supports the regular expression notation."
},
{
"FullPath": "QER\\ITShop\\Templates",
"Value": "1",
"Enabled": false,
"IsEnabledResulting": false,
"IsPreprocessorCondition": true,
"IsCrypted": false,
"Description": "Preprocessor relevant configuration parameter for controlling the database model components for the IT Shop Shelf Filling Wizard. If the parameter is set, the Shelf Filling Wizard components are available. Changes to the parameter require recompiling the database."
}
]10) ITShopOrg examples (FullPath + UID_AccProduct)
Query:
SELECT TOP (30)
ITShopInfo,
UID_ITShopOrg,
Ident_Org,
FullPath,
UID_AccProduct
FROM ITShopOrg
WHERE UID_OrgRoot = 'QER-V-ITShopOrg'
ORDER BY ITShopInfo, FullPath;Result:
[
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "QER-3c05f166d3224c4aa3f069913bc36c1d",
"Ident_Org": "Access Lifecycle",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "ADS-ITSHOPORG-ADGROUPS-BO",
"Ident_Org": "Active Directory Groups",
"FullPath": "Identity & Access Lifecycle\\Active Directory Groups",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "ADS-ITSHOPORG-GROUPS-BO",
"Ident_Org": "Group Lifecycle",
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-BO",
"Ident_Org": "Identity Lifecycle",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "SBX-ITS-5C7F1AC9D4A34DBBB23EA107B77C18",
"Ident_Org": "Sandbox Applications",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "SBX-ITS-415A0CE25B8545DB907EDB55A4CB82",
"Ident_Org": "Sandbox Business Roles",
"FullPath": "Identity & Access Lifecycle\\Sandbox Business Roles",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "SBX-ITS-4266537524A5448A8C9E3484608D8A",
"Ident_Org": "Sandbox Distribution Lists",
"FullPath": "Identity & Access Lifecycle\\Sandbox Distribution Lists",
"UID_AccProduct": null
},
{
"ITShopInfo": "BO",
"UID_ITShopOrg": "SBX-ITS-E4B74F41569A487580B4C65E73AA86",
"Ident_Org": "Sandbox System Role Bundles",
"FullPath": "Identity & Access Lifecycle\\Sandbox System Role Bundles",
"UID_AccProduct": null
},
{
"ITShopInfo": "CU",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-CU",
"Ident_Org": "Identity Lifecycle Customer",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle Customer",
"UID_AccProduct": null
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-320A1570F5B84819A361FF18B159A6D1",
"Ident_Org": "Add Slack channel to recipient",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Add Slack channel to recipient",
"UID_AccProduct": "QER-38667c68A9C043CAAAA690d51255DAF3"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-6DF4E012563B402891CB37A0A86915E6",
"Ident_Org": "Add Teams channel to recipient",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Add Teams channel to recipient",
"UID_AccProduct": "QER-96F8166E403E9448AD8F293BB15A6260"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-7B26B28F2EFE4989A20B0A9D1A01C108",
"Ident_Org": "New Starling Cloud Assistant recipient",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\New Starling Cloud Assistant recipient",
"UID_AccProduct": "QER-3072C3AEF9124F4CBF0B2F67F47B82F5"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "3A812A6C-2664-4875-967D-FDF75383402E",
"Ident_Org": "Sandbox Domain Accounts",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Sandbox Domain Accounts",
"UID_AccProduct": "e981f143-afa0-4a50-bd1e-bb8668188908"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "F5888005-B84A-4FC3-A76E-21212250765B",
"Ident_Org": "Standard LDAP Account",
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Standard LDAP Account",
"UID_AccProduct": "e44592f5-64e4-4c5a-ac26-bea979f662f5"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "ADS-ITSHOPORG-ADS-GROUPDELETE",
"Ident_Org": "Delete Active Directory group",
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\Delete Active Directory group",
"UID_AccProduct": "ADS-A261D1D7E0D04060899D679C002A7543"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "ADS-ITSHOPORG-ADS-GROUPCHANGE",
"Ident_Org": "Modify Active Directory group",
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\Modify Active Directory group",
"UID_AccProduct": "ADS-81F10A79075441E8B47EEC91D04E01D4"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "ADS-ITSHOPORG-ADS-NEWGROUP-DL",
"Ident_Org": "New Active Directory distribution group",
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\New Active Directory distribution group",
"UID_AccProduct": "ADS-EFFB4A3D760248949257BC4781592E7C"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "ADS-ITSHOPORG-ADS-NEWGROUP-SG",
"Ident_Org": "New Active Directory security group",
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\New Active Directory security group",
"UID_AccProduct": "ADS-FADE2DA6501F4A26AC7791D257A128DB"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-ROLE-CHALLENGE-PR",
"Ident_Org": "Challenge loss of role membership",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Challenge loss of role membership",
"UID_AccProduct": "QER-DA5D25B6090242B9A4D3A11A654D2813"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-PR",
"Ident_Org": "Delegation",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Delegation",
"UID_AccProduct": "QER-D1A5CB5711A04BECA293402395C28983"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-SUBSTITUTE-PR",
"Ident_Org": "Deputy (temporary)",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Deputy (temporary)",
"UID_AccProduct": "QER-80100ddf1c784c34a20b54a8107c5238"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-NEWMGR",
"Ident_Org": "New manager assignment",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\New manager assignment",
"UID_AccProduct": "QER-9F7E5C3156D54C979C427FDB081C7056"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-ASSIGN-PR",
"Ident_Org": "Role entitlement assignment",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Role entitlement assignment",
"UID_AccProduct": "QER-49D549178FF441228884C3F0754A8DE1"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "QER-ITSHOPORG-DELEGATION-MEMBER-PR",
"Ident_Org": "Role membership",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Role membership",
"UID_AccProduct": "QER-E4C02D1588604613B2E3743B65BF5453"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "RMS-ED373920E29A6B40B8198B587C6DAA1A",
"Ident_Org": "System role entitlement assignment",
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\System role entitlement assignment",
"UID_AccProduct": "RMS-79b6410a215f48aa8648cd20bf1d4ed1"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "2B7E6D9A-B1A1-4AE7-9B4F-6C542364BA75",
"Ident_Org": "Atlas Office - Administrator",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Administrator",
"UID_AccProduct": "97f5235e-670f-40fa-9373-2aaee32ea21a"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "4686AE1B-3958-4DFE-A32B-6F34F51D70E8",
"Ident_Org": "Atlas Office - Content editor",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Content editor",
"UID_AccProduct": "9becdd9c-a7a2-4e5d-9d86-996b5e6db2fb"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "479DC17B-921A-42EE-B079-CF3ABC4DCF7B",
"Ident_Org": "Atlas Office - Read-only",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Read-only",
"UID_AccProduct": "ef9f3fc8-8a35-451a-aeed-5ddad8b03f80"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "5FEABDBA-DDAF-42D3-ACF2-96057739ED40",
"Ident_Org": "Atlas Office - Request approver",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Request approver",
"UID_AccProduct": "3b91c08f-9df4-4e1b-8b96-25aacd81a36c"
},
{
"ITShopInfo": "PR",
"UID_ITShopOrg": "8A2E626A-8673-4321-A4BF-C6CE94B28D2A",
"Ident_Org": "Atlas Office - Standard user",
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Standard user",
"UID_AccProduct": "5303ecba-3e3e-4cd7-ad8c-c1cd0c5eea51"
}
]11) PR nodes join AccProduct — sample
Query:
SELECT TOP (30)
o.FullPath,
o.UID_AccProduct,
p.Ident_AccProduct,
p.Description,
p.UID_AccProductGroup,
p.IsToHideFromITShop,
p.IsInActive
FROM ITShopOrg o
JOIN AccProduct p ON p.UID_AccProduct = o.UID_AccProduct
WHERE o.ITShopInfo = 'PR'
AND o.UID_OrgRoot = 'QER-V-ITShopOrg'
ORDER BY o.FullPath;Result:
[
{
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Add Slack channel to recipient",
"UID_AccProduct": "QER-38667c68A9C043CAAAA690d51255DAF3",
"Ident_AccProduct": "Add Slack channel to recipient",
"Description": "Add the Slack channel to a recipient in Starling Cloud Assistant. (Predefined service item).",
"UID_AccProductGroup": "QER-F72C69B14FD8E3459068649237F39532",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Add Teams channel to recipient",
"UID_AccProduct": "QER-96F8166E403E9448AD8F293BB15A6260",
"Ident_AccProduct": "Add Teams channel to recipient",
"Description": "Add the Teams channel to a recipient in Starling Cloud Assistant. (Predefined service item).",
"UID_AccProductGroup": "QER-F72C69B14FD8E3459068649237F39532",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\New Starling Cloud Assistant recipient",
"UID_AccProduct": "QER-3072C3AEF9124F4CBF0B2F67F47B82F5",
"Ident_AccProduct": "New Starling Cloud Assistant recipient",
"Description": "For requesting a new Starling Cloud Assistant recipient. (Predefined service item).",
"UID_AccProductGroup": "QER-F72C69B14FD8E3459068649237F39532",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Sandbox Domain Accounts",
"UID_AccProduct": "e981f143-afa0-4a50-bd1e-bb8668188908",
"Ident_AccProduct": "Sandbox Domain Accounts",
"Description": null,
"UID_AccProductGroup": "74f39ec5-9da9-4666-b03a-b8bcade31c74",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Access Lifecycle\\Standard LDAP Account",
"UID_AccProduct": "e44592f5-64e4-4c5a-ac26-bea979f662f5",
"Ident_AccProduct": "Standard LDAP Account",
"Description": null,
"UID_AccProductGroup": "74f39ec5-9da9-4666-b03a-b8bcade31c74",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\Delete Active Directory group",
"UID_AccProduct": "ADS-A261D1D7E0D04060899D679C002A7543",
"Ident_AccProduct": "Delete Active Directory group",
"Description": "For requesting the deletion of an existing Active Directory group. (Predefined service item).",
"UID_AccProductGroup": "ADS-55BA7CB5B5D14166A016C8F993CD0BDC",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\Modify Active Directory group",
"UID_AccProduct": "ADS-81F10A79075441E8B47EEC91D04E01D4",
"Ident_AccProduct": "Modify Active Directory group",
"Description": "Modification of group scope (global, local, universal) and type (security, distribution). (Predefined service item).",
"UID_AccProductGroup": "ADS-55BA7CB5B5D14166A016C8F993CD0BDC",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\New Active Directory distribution group",
"UID_AccProduct": "ADS-EFFB4A3D760248949257BC4781592E7C",
"Ident_AccProduct": "New Active Directory distribution group",
"Description": "For requesting a new Active Directory distribution group. (Predefined service item).",
"UID_AccProductGroup": "ADS-55BA7CB5B5D14166A016C8F993CD0BDC",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Group Lifecycle\\New Active Directory security group",
"UID_AccProduct": "ADS-FADE2DA6501F4A26AC7791D257A128DB",
"Ident_AccProduct": "New Active Directory security group",
"Description": "For requesting a new Active Directory security group. (Predefined service item).",
"UID_AccProductGroup": "ADS-55BA7CB5B5D14166A016C8F993CD0BDC",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Challenge loss of role membership",
"UID_AccProduct": "QER-DA5D25B6090242B9A4D3A11A654D2813",
"Ident_AccProduct": "Challenge loss of role membership",
"Description": "For handling the process of extending the permissions inherited from a membership that already got lost. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Delegation",
"UID_AccProduct": "QER-D1A5CB5711A04BECA293402395C28983",
"Ident_AccProduct": "Delegation",
"Description": "Default service item for handling the process of requesting delegations. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Deputy (temporary)",
"UID_AccProduct": "QER-80100ddf1c784c34a20b54a8107c5238",
"Ident_AccProduct": "Deputy (temporary)",
"Description": "For handling the process of requesting deputies. (Predefined service item.)",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\New manager assignment",
"UID_AccProduct": "QER-9F7E5C3156D54C979C427FDB081C7056",
"Ident_AccProduct": "New manager assignment",
"Description": "For handling the process of the assignment of a new manager. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Role entitlement assignment",
"UID_AccProduct": "QER-49D549178FF441228884C3F0754A8DE1",
"Ident_AccProduct": "Role entitlement assignment",
"Description": "Default service item for requesting entitlement assignments to roles. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\Role membership",
"UID_AccProduct": "QER-E4C02D1588604613B2E3743B65BF5453",
"Ident_AccProduct": "Role membership",
"Description": "Default service item for requesting role memberships. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Identity Lifecycle\\System role entitlement assignment",
"UID_AccProduct": "RMS-79b6410a215f48aa8648cd20bf1d4ed1",
"Ident_AccProduct": "System role entitlement assignment",
"Description": "Default service item for requesting entitlement assignments to system roles. (Predefined service item).",
"UID_AccProductGroup": null,
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Administrator",
"UID_AccProduct": "97f5235e-670f-40fa-9373-2aaee32ea21a",
"Ident_AccProduct": "Atlas Office - Administrator",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Atlas Office (Productivity) tier Administrator. Backing AD group: APP_ATLAS_ADMIN.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Content editor",
"UID_AccProduct": "9becdd9c-a7a2-4e5d-9d86-996b5e6db2fb",
"Ident_AccProduct": "Atlas Office - Content editor",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Atlas Office (Productivity) tier Content editor. Backing AD group: APP_ATLAS_EDITOR.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Read-only",
"UID_AccProduct": "ef9f3fc8-8a35-451a-aeed-5ddad8b03f80",
"Ident_AccProduct": "Atlas Office - Read-only",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Atlas Office (Productivity) tier Read-only. Backing AD group: APP_ATLAS_READER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Request approver",
"UID_AccProduct": "3b91c08f-9df4-4e1b-8b96-25aacd81a36c",
"Ident_AccProduct": "Atlas Office - Request approver",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Atlas Office (Productivity) tier Request approver. Backing AD group: APP_ATLAS_APPROVER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Atlas Office - Standard user",
"UID_AccProduct": "5303ecba-3e3e-4cd7-ad8c-c1cd0c5eea51",
"Ident_AccProduct": "Atlas Office - Standard user",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Atlas Office (Productivity) tier Standard user. Backing AD group: APP_ATLAS_USER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Beacon CRM - Administrator",
"UID_AccProduct": "5ecf89dd-adfe-42c7-9fdf-fa0549244497",
"Ident_AccProduct": "Beacon CRM - Administrator",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Beacon CRM (Sales) tier Administrator. Backing AD group: APP_BEACON_ADMIN.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Beacon CRM - Content editor",
"UID_AccProduct": "eae72757-ec98-4f30-8b35-d6787de0eb4d",
"Ident_AccProduct": "Beacon CRM - Content editor",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Beacon CRM (Sales) tier Content editor. Backing AD group: APP_BEACON_EDITOR.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Beacon CRM - Read-only",
"UID_AccProduct": "708b9eb2-5eff-48d3-8317-5ee369f92002",
"Ident_AccProduct": "Beacon CRM - Read-only",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Beacon CRM (Sales) tier Read-only. Backing AD group: APP_BEACON_READER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Beacon CRM - Request approver",
"UID_AccProduct": "c7b0c224-0290-4c28-b32c-f7e66a9c939f",
"Ident_AccProduct": "Beacon CRM - Request approver",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Beacon CRM (Sales) tier Request approver. Backing AD group: APP_BEACON_APPROVER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Beacon CRM - Standard user",
"UID_AccProduct": "78f64d20-9c79-425d-a3e0-eaf2a5a64c54",
"Ident_AccProduct": "Beacon CRM - Standard user",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Beacon CRM (Sales) tier Standard user. Backing AD group: APP_BEACON_USER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Citadel VPN - Administrator",
"UID_AccProduct": "c78983c7-ad67-4c9a-8a8e-bfa8c8c3cea8",
"Ident_AccProduct": "Citadel VPN - Administrator",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Citadel VPN (Infrastructure) tier Administrator. Backing AD group: APP_CITADEL_ADMIN.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Citadel VPN - Content editor",
"UID_AccProduct": "f7cc05c1-b2ff-4b1f-ba46-85fe9f648f3d",
"Ident_AccProduct": "Citadel VPN - Content editor",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Citadel VPN (Infrastructure) tier Content editor. Backing AD group: APP_CITADEL_EDITOR.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Citadel VPN - Read-only",
"UID_AccProduct": "5a3752d7-f2da-4ea6-b93c-58f4a5d6cb8b",
"Ident_AccProduct": "Citadel VPN - Read-only",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Citadel VPN (Infrastructure) tier Read-only. Backing AD group: APP_CITADEL_READER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
},
{
"FullPath": "Identity & Access Lifecycle\\Sandbox Applications\\Citadel VPN - Request approver",
"UID_AccProduct": "2dd9ff17-310b-4b51-8679-08269df73d3b",
"Ident_AccProduct": "Citadel VPN - Request approver",
"Description": "[OIM-SANDBOX-SEED:ad-shop-seeding:v1] Requestable sandbox AD group entitlement for Citadel VPN (Infrastructure) tier Request approver. Backing AD group: APP_CITADEL_APPROVER.",
"UID_AccProductGroup": "SBX-APG-18479F84C2374DD3B31FD4DDE8B45A",
"IsToHideFromITShop": false,
"IsInActive": false
}
]12) ADSGroup IT Shop flags (distribution)
Query:
SELECT IsForITShop, IsITShopOnly, COUNT(*) AS Cnt
FROM ADSGroup
GROUP BY IsForITShop, IsITShopOnly
ORDER BY IsForITShop DESC, IsITShopOnly DESC;Result:
[
{
"IsForITShop": true,
"IsITShopOnly": false,
"Cnt": 97
},
{
"IsForITShop": false,
"IsITShopOnly": false,
"Cnt": 287
}
]13) BaseTreeHasADSGroup placement in IT Shop subtree
Query:
SELECT
COUNT(*) AS Cnt_Total,
SUM(CASE WHEN o.UID_OrgRoot = 'QER-V-ITShopOrg' THEN 1 ELSE 0 END) AS Cnt_InITShopOrgRoot
FROM BaseTreeHasADSGroup h
JOIN BaseTree o ON o.UID_Org = h.UID_Org;Result:
{
"Cnt_Total": 385,
"Cnt_InITShopOrgRoot": 194
}14) ITShopOrgHasADSGroup view row count
Query:
SELECT COUNT(*) AS Cnt
FROM ITShopOrgHasADSGroup;Result:
{
"Cnt": 194
}