Remove specific AD group membership 30 days after AD account is disabled

[Community_User]

Originally posted on September 21 2020 at 15:59 UTC

Hi Team,

We have a use case where we need to remove AD group membership of terminated users from a specific AD group 30 days after the user has been terminated. Is there any way to achieve this?

[Community_User]

Originally posted on September 22 2020 at 05:07 UTC

Hi Manisha,

Greetings!!

This is achievable. You could simply disabled the account on termination date (only update its UAC and optionally move it to another container without removing groups) and could trigger an actionable analytics (for delayed deprovisioning case and trigger) r with deleteAllGroups control to remove this after 30/60/90 days (as per your business logic).

Thanks & Regards,

Anand Kumar Jha

[Community_User]

Originally posted on September 22 2020 at 07:14 UTC

Hi Anand,

Thank you for your reply. My requirement here is to remove the user from a specific AD group and not from all groups. Can that be achieved?

Regards,

Manisha Chakraborty

[Community_User · Accepted solution]

Originally posted on September 22 2020 at 11:32 UTC

Hi Manisha,

This feature is not available for now.

You could raise an enhancement for this Feature.

Thanks & Regards,

Anand Kumar Jha