member-assignment-extensions

It is applicable to the <entitlement> type group only. The Identity Manager Data Collection Service (DCS) should be able to obtain the member assignment information from the managed and unmanaged accounts. Because member assignment information can get bulky when the groups and roles have many assigned members, the query extensions to retrieve this information are optional. Appropriate query extensions should be added to the querying agent. The member assignment information is available on both account and group entitlements but it must be retrieved slightly differently. For entitlement with the group type name, the content of the query-xml child node of the member-assignment-query node is expected to be an extension to the existing query defined in the entitlement XML. For example, search-attr or read-attr nodes.

<member-assignment-extensions>
  <query-attr name="query-type">entitlement-assignment</query-attr>
  <query-xml>
    <read-attr attr-name="member"/>
  </query-xml> 
</member-assignment-extensions>