Term · 3. Account Management & Provisioning
Query Playground QP
Definition
In Evolveum midPoint, a **Query Playground (QP)** is an administrative UI page that allows authorized users to construct, run, and debug repository queries against midPoint objects using the midPoint query language. It is intended as a safe “sandbox” for interactively exploring search filters, testing query performance, and inspecting raw query results without modifying data. Access is typically restricted to administrators because queries can expose sensitive directory and identity data.
Related terms
-
Attribute (Attr)
In identity and access management, an **attribute** is a characteristic or property of an entity (such as an account, pr …
-
Entitlement Creep
Gradual accumulation of access rights beyond what's needed for current job, as users change roles without losing prior a …
-
HR Policy
Policies governing identity lifecycle based on HR data — what triggers provisioning, what role mapping applies, what app …
-
Orphan Account
Account in a target system that cannot be correlated to any identity in the identity warehouse — abandoned by previous o …
-
Over-provisioning
Granting access beyond what's needed for the role — common cause of attack surface expansion and SoD violations. Sources …
-
Shadow object
In MidPoint, a **shadow object** is a repository object of type `ShadowType` that represents an *account, entitlement, o …