Click HERE to see how Saviynt Intelligence is transforming the industry. |
04/12/2022 12:56 PM
I have below requirement and not sure if it can be achieve through out of box
1..While termination or suspension of user ,Disable the AD account and Remove all the group membership and Keep group membership information in Saviynt DB.
2.once Account Enabled or Re-hire then pick all the group membership from DB and launch the request for approval process .
Once group membership request approved then Enable the AD account.
Thanks
Pradeep
Solved! Go to Solution.
04/12/2022 01:55 PM
Hi Pradeep,
Greetings!!
The requirement sited by you is partially possible out of box but not completely.
During provisioning, we do not have a feature to store membership history and remove associations at AD end.
if we request to remove all groups, it removes groups at either end.
Feature of disable account is possible via userAccountControl at AD.
Thanks & Regards,
Anand Kumar Jha