Reference attribute query processing for a multi-tenant cloud service

A computer-readable medium having instructions stored thereon that, when executed by a processor, cause the processor to perform reference attribute query processing in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:

• receiving a request from a client of the multi-tenant cloud-based IAM system, wherein the request indicates one or more reference attributes associated with a resource that is persisted in a database of the multi-tenant cloud-based IAM system, wherein the request indicates one or more filter conditions configured to be applied on the one or more reference attributes;
• building a query based on the one or more reference attributes and the one or more filter conditions;
• retrieving resource data by executing the query on a database of the multi-tenant cloud-based IAM system, wherein the retrieved resource data is associated with the one or more reference attributes and satisfies the one or more filter conditions;
• and
• returning the retrieved data to the client of the multi-tenant cloud-based IAM system.

A system comprising:

• a processor;
• and
• a computer-readable medium having instructions stored thereon that, when executed by the processor, cause the processor to perform reference attribute query processing in a multi-tenant cloud-based identity and access management (IAM) system, the performing comprising:
• receiving a request from a client of the multi-tenant cloud-based IAM system, wherein the request indicates one or more reference attributes associated with a resource that is persisted in a database of the multi-tenant cloud-based IAM system, wherein the request indicates one or more filter conditions configured to be applied on the one or more reference attributes;
• building a query based on the one or more reference attributes and the one or more filter conditions;
• retrieving resource data by executing the query on a database of the multi-tenant cloud-based IAM system, wherein the retrieved resource data is associated with the one or more reference attributes and satisfies the one or more filter conditions;
• and
• returning the retrieved data to the client of the multi-tenant cloud-based IAM system.