Approval for Account Reactivation

[Community_User]

Originally posted on June 29 2020 at 11:42 UTC

When manual reactivation request is created for accounts that were suspended/disabled directly at the target system and their account status was imported into Saviynt using App Data Import, approval must be sent for all stakeholders such as System owner and all entitlement(AD group) owners to which the account is a memberOf.

Is it possible to add a workflow to Account activation process such that above mentioned requirement can be achieved?

[Community_User · Accepted solution]

Originally posted on July 3 2020 at 19:03 UTC

Hi,

Are you looking for an out of band access is provided to a user account, not from SSM, but access provided from the third-party application. Access given to a user account outside SSM is known as out of band access. Running the RevokeOutOfBandAccessJob fetches the list of users who are given access out-of-band that is not through SSM application. This job revokes the access given to the user and based on the option selected in Action for Out of Band Detection in Endpoint, it generates the request for providing access through SSM. Workflow from security system is used for regular request as well as out of band recreate request.

or

Ability through a request such that an end-user can place a request to enable the account.