Skip to content

SSO Group

Copy page

AWS SSO Group Fields

Field Type Possible Operators Description
Guid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A unique identifier that is a combination of the GUID of the selected Scan and the SSO group’s unique ID.
FSName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A special unique identifier that is a combination of the DisplayName and the Identity Store ID.
DisplayName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY The group’s display name.
Description TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY The group description, if one is set.
GroupId TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY The Identity Store group identifier assigned by AWS.
IdentityStoreId TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY The identity store the group belongs to (e.g., d-1234567890).
AccountId TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY The account that hosts the Identity Center instance the group belongs to.
AWSTier NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Privilege tier of the group based on the effective permissions its members inherit. Higher values indicate greater privilege.
ExposurePoint NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL A numerical value indicating the level of exposure based on how many other entities can reach this group through attack paths.
risk NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL The risk score of the group calculated based on vulnerability counts and severities.

Was this page helpful?

Thank you for your feedback.