2 Default task in Actionable report.

[rajat1996]

Hi, 

We have a requirment in our project that user we need to remove group membership of user and move user to disable OU. 

We cannot do it through code due to restriction. 

So we are using the actionable analytics for the same. I just want to confirm can we perform 2 default tasks in acionable report at the same time. Is it achievable ?

Let me know if anyone has worked on such scenario. 

[poonammhetre]

Hello,

The requirement is that 130 days after user is terminated, we have to remove the AD account and move user to disabled OU and remove group membership of the account.  

We can use the default action as 'Deprovision Account'  but how to remove group membership as well?

How to achieve this scenario using actionable analytics? Creating separate analytics to account and  remove group membership is the only option?

Thanks,

Poonam

[rushikeshvartak]

Enable "Create Dependent Entitlement Task for Remove Access"

Remove Access Task is not created when the Remove Account request is completed.

Cause: This issue might occur if the Create Dependent Entitlement Task for Remove Access configuration is not set.

Resolution: Perform the following:

1. Click Applications > Admin > Menu > Identity Repository > Security System > Endpoints.

   Select the endpoint.

2. On the Endpoint Details tab, set the Create Dependent Entitlement Task for Remove Access configuration parameter

3. Click Update.

https://docs.saviyntcloud.com/bundle/EIC-Troubleshooting/page/Content/Troubleshooting.htm

[Rajesh-R]

1. We cannot perform 2 default tasks in a same actionable report at the same time.
2. However, if we have multiple actionable analytics and run them in a trigger, we can achieve this, bit error prone as there could be timing issues / some other issues.
3. For AD, Use analytics / rules to create a remove account task, which can perform both the actions using the following JSON Elements configured in the REMOVEACCOUNTACTION:
   "REMOVEGROUPS": "YES",
   "MOVEDN": "<DN>",

[Hemanath]

Hi @poonammhetre ,

Try enabling create dependent entitlement task in endpoint to remove entitlements during deprovision of accounts

Thanks,

Hemanath J