Skip to main content
Clients and items can select/filter other items with the help of queries. Queries utilize tags, properties of an item or the relations of it to execute. Query is also used for sorting items when fetching a list of items, by any property and by ascending or descending order. Some examples of items that use queries:
  • Group can dynamically assign users
  • Policy can target items or principals with queries
  • GVC can dynamically update its assigned locations

Filtering

A query consists of terms, each term can target tags, properties or relations (rel). For rel term, the value depends on the kind. For example, workload has gvc rel, which allows you to filter workloads in an org by the GVC they belong to.
In the Console, each page that lists items of a kind has a query button on top of the table.The Match Tags By selector values are:
SelectorDefinition
AllAll tag items should match
AnyAny of the tags should match
NoneNone of these tags should match
To filter resources based on their tags:
  1. Click on the Query button
  2. Select which term you want to target: tag, property, or rel
  3. Type a value for the selected term key
  4. Select the operator and type the term value if needed
  5. Click Apply and the filtered resources will be displayed
To remove the filter, click on the Query button again and click Clear.

Sorting

When fetching a list of items, you can sort by various properties in ascending or descending order.

Sort Order

OrderDescription
ascAscending order (A-Z, oldest first, lowest first)
descDescending order (Z-A, newest first, highest first)

Common Sort Fields

The following sort fields are available for most resources:
FieldDescription
idResource unique identifier
nameResource name
versionResource version number
descriptionResource description
createdCreation timestamp
lastModifiedLast modification timestamp

Resource-Specific Sort Fields

Some resources have additional sort fields:
FieldDescription
originOrigin of the location
providerCloud provider (aws, gcp, azure)
regionCloud region
FieldDescription
originOrigin of the group
FieldDescription
providerCloud provider (aws, gcp, azure, ngs)
FieldDescription
idpIdentity provider
emailUser email address
FieldDescription
originOrigin of the policy