Re-Enable AD account

[Community_User]

Originally posted on May 22 2020 at 09:42 UTC

I have below requirement and not sure if it can be achieve through out of box

1..While termination or suspension of user ,Disable the AD account and Remove all the group membership and Keep group membership information in Saviynt DB.

2.once Account Enabled or Re-hire then pick all the group membership from DB and launch the request for approval process .

Once group membership request approved then Enable the AD account.

Thanks

Pradeep

[Community_User · Accepted solution]

Originally posted on May 22 2020 at 09:59 UTC

Hi Pradeep,

Greetings!!

The requirement sited by you is partially possible out of box but not completely.

During provisioning, we do not have a feature to store membership history and remove associations at AD end.

if we request to remove all groups, it removes groups at either end.

Feature of disable account is possible via userAccountControl at AD.

Thanks & Regards,

Anand Kumar Jha