Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Account Attribute update on Enable/Disable Account Operation

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 6 2020 at 18:51 UTC

Hello Team,


Would like to know if there is any way to modify account attributes on enable or disable account operation. This is needed because when we perform account disable operation although the user is moved to different OU (Disabled uses) in AD, it still shows the old OU (User Accts)/distinguished name value in SSM account attributes. I know that upon target reconciliation data will be in sync however when operation is performed thru SSM there should be an option to reflect those values on account attributes as well.


Is this feature already available?


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.
5 REPLIES 5

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 6 2020 at 18:59 UTC

Hi Pallavi,


AccountID is the account attribute which is recommended to be mapped with distinguishedName in ACCOUNT_ATTRIBUTE in AD connection. AccountID does get updated once the account is disabled and moved to a different OU.


This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 7 2020 at 01:46 UTC

I have accountId mapped to DN however there is comments field which is also mapped to DN and its not updated on enable/disable operation. So whenever you go to accounts and see the records comments will still show the old dn value. Is there any option to update account attributes as a part of enable or disable JSON. I tried but it did not work.


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 7 2020 at 08:28 UTC

Hi Pallavi,


Greetings!!


ACCOUNTID Update is only supported post enable/disable operation.

If you want to update other account attributes, you could schedule Incremental Account import after a certain defined duration.



Thanks & Regards,

Anand Kumar Jha

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 7 2020 at 12:11 UTC

Thanks Anand for your reply.


Can we consider this as a feature request for future releases?


Thanks,

Pallavi

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.

Community_User
Saviynt Employee
Saviynt Employee
Originally posted on May 7 2020 at 12:43 UTC

Hi Pallavi,


Greetings!!


Sure!! You could raise this as a feature request.


Thanks & Regards,

Anand Kumar Jha

This message was previously posted on Saviynt's legacy forum by a community user and has been moved over to this forum for continued exposure.