| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of the GUID of the selected scan and the role’s unique node ID. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier: the role name combined with its scope (organization or enterprise slug). |
| Name |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The name of the organization role (e.g., security-manager, all-repo-admin). |
| Description |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The description configured for the role. |
| BaseRole |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The built-in role the custom role is derived from (e.g., read, write, admin). |
| OrganizationLogin |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The login of the organization the role belongs to. |
| IsCustom |
BOOLEAN |
N/A (toggle) |
Indicates whether the role is a custom-defined role rather than a built-in one. |
| IsPrivileged |
BOOLEAN |
N/A (toggle) |
Indicates whether the role has been identified as privileged based on its included permissions. |
| IsShadow |
BOOLEAN |
N/A (toggle) |
Indicates whether the role is a shadow admin, able to reach Tier 0 indirectly. |
| GHTier |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The privilege tier of the object (0 = Tier 0 / crown jewel, 2 = normal). |
| risk |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The calculated risk score of the role. |
| ExposurePoint |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The exposure point score of the role. |
