Search Roles

Search roles in your SentinelOne environment.

Options

Field Definition Type Required

Result Set

Choose a method to filter search results:

  • First Matching Record: Returns the first record that matches.

  • First 100 Matching Records: Returns the first 100 matching records.

  • Stream Matching Records: Passes all matching records from your parent flow to a helper flow.

    Selecting this option adds a Streaming input section to the card where you can select a helper flow for streaming and add custom extensible fields.

Dropdown FALSE

Filter

Choose one of the following filter options to search for roles where the selected attributes match:

  • Equal: The selected attributes are equal to the provided values.

  • Contains: The selected attributes contain the provided values.

  • Before: The selected attributes have a date earlier than the provided values.

  • After: The selected attributes have a date older than the provided values.

Dropdown FALSE

Input

Field Definition Type Required

Sort

This field appears when you select First Matching Record and First 100 Matching Records from the Result Set option.

Sort Order

Indicate the sort order for the filtered results:

  • Ascending

  • Descending

Dropdown FALSE

Sort By

Sort the results by field:

  • ID

  • Account Name

  • Creator

  • Description

  • Created At

  • Name

  • Site Name

  • Updated At

  • Updated By

  • Users In Roles

    Default sorting is based on the Created At field in the ascending order.

Dropdown FALSE

Search Criteria

Name

The name of the role.

Text FALSE

Creator

The email address of the user who created the role.

Text FALSE

Creator ID

The unique identifier of the user who created the role.

Text FALSE

Description

The description of the role.

Text FALSE

Group IDs

Unique identifier of the group.

List of Text FALSE

Predefined Role

Filter to include only system or custom roles.

True/False FALSE

Account IDs

List of Text FALSE

Account Name

The account name that's associated with the role.

Text FALSE

Site IDs

The unique identifier of the site that's associated with the role.

List of Text FALSE

Site Name

The site name associated with the role.

Text FALSE

Query

Performs a search on the fields: Role name and description.

This field appears when you select Contains from the Filter option.

Text FALSE

Created Before

The date and time when the role was created.

This field appears when you select Before from the Filter option.

Date & Time FALSE

Updated Before

The date and time when the role was last updated.

This field appears when you select Before from the Filter option.

Date & Time FALSE

Created After

The date and time after which the role was created.

This field appears when you select After from the Filter option.

Date & Time FALSE

Updated After

The date and time after which the role was last updated.

This field appears when you select After from the Filter option.

Date & Time FALSE

IDs

The unique identifier of the role.

This field appears when you select First 100 Matching Records from the Result Set field and Equal from the Filter field.

List of Text FALSE

Include Children

Specifies whether to include roles from child scopes.

This field appears when you select First 100 Matching Records from the Result Set field and Equal from the Filter field.

True/False FALSE

Include Parents

Specifies whether to include roles from parent scopes.

This field appears when you select First 100 Matching Records from the Result Set field and Equal from the Filter field.

True/False FALSE

Streaming

Flow

Click Choose Flow to browse and select a helper flow where the search results will be streamed, then click Choose to confirm.

Optionally, click the empty field under Click or drop here to create and add custom extensible fields that pass data to the helper flow. These fields are added as key/value pairs under the State output object in the helper flow.

This field appears when you select Stream Matching Records from the Result Set option.

Flow

TRUE

Record Limit

Specify the number of records to stream:

  • The Record Limit field can't be set to 0. When it's is set to greater than 1, the stream returns up to the maximum number specified.

  • When the Record Limit field is empty, null, or not selected, the stream returns all records.

  • The default value is 500000.

  • The valid range is from 1 to 500000.

This field appears when you select Stream Matching Records from the Result Set option.

Number FALSE

Output

Field Definition Type

Result

ID

The unique identifier of the role.

Text

Name

The name of the role.

Text

Account Name

The name of the account.

Text

Created At

The date and time when the role was created.

Date & Time

Creator ID

Unique identifier of the user. Text

Creator

The user who created the role.

Text

Description

The description of the role.

Text

Predefined Role

If true, the role is a system role.

True/False

Scope

The scope of the role.

Text

Scope ID

The unique identifier of the scope that's with the role.

Text

Site Name

The name of the site that's associated with the role.

Text

Updated At

The date and time when the role was updated.

Date & Time

Users In Roles

The number of users who are assigned to this role.

Number

Updated By

The user who updated the role.

Text

Updated By ID

The unique identifier of the user who updated the role.

Text

Raw Output

The raw output returned by the SentinelOne API endpoint.

Object

Records Streamed

The number of records that are streamed in a streaming flow.

This field appears when you select Stream Matching Records from the Result Set option.

Number