Privilege Zone Rules

MATCH (agent:Okta_Agent {operational_status: 'OPERATIONAL'})-[:Okta_AgentMemberOf]->(:Okta_AgentPool)-[:Okta_AgentPoolFor]->(app:Okta_Application)
WHERE 'OUTBOUND_DEL_AUTH' IN app.features
AND agent.type IN ['AD', 'LDAP']
RETURN agent

MATCH (n:Okta_Organization)
RETURN n

MATCH (n:Okta_Device)-[:Okta_DeviceOf]->(:Okta)-[:Okta_HasRoleAssignment|Okta_MemberOf*1..2]->(r:Okta_RoleAssignment)-[:Okta_ScopedTo]->(:Okta_Organization)
WHERE r.type = "SUPER_ADMIN"
OR r.type = "ORG_ADMIN"
RETURN n

MATCH (n:Okta)-[:Okta_HasRoleAssignment|Okta_MemberOf*1..2]->(r:Okta_RoleAssignment)-[:Okta_ScopedTo]->(:Okta_Organization)
WHERE r.type = "SUPER_ADMIN"
OR r.type = "ORG_ADMIN"
RETURN n