Access Certifications | Service Accounts | Owner | Primary Certifier

[Angel]

Reaching out for assistance from with questions in regard to attestations for Service Accounts. 

Background: Our goal is to automate as many of the pieces as possible. Currently, 'owner' is not automatically applied to service accounts. From my understanding, we must manually set the owner on an account and also set them as the Primary Certifier to be able to configure and pull those accounts into a certification campaign. 

Our plan: We're thinking of populating the 'owner' in the 'manager' AD attribute in for service accounts. 

Our question: Has anyone developed a way to map an AD attribute that hold the owner on a service account to map to the owner and primary certifier in Saviynt for that account?

[dgandhi]

Are looking for custom query to meet this requirement?

Thanks

[Angel]

Sure, we're not sure what other options there may be but we are open to discuss this option. 

[dgandhi]

Below solution I can think of

1. Update AD DN of all the User on their user profile via Sav to Sav
2. since you are going to update the DN of the manager to the account (this field will be used to  join with users dn value that we will be storing in step1)
3. Write custom query job or sav to sav to find the user name of the manager
4. Once the username is found , update that as account owner
5. Also update the rank

[Dev]

Use analytics report with map owner action