AD Service Account DeleteAllGroups not working while disable account

[AshishDas]

Hi,

We are trying to disable AD Service Accounts (uses the AD OOTB Connector) to disable a service account. The disable task is getting triggered and when we run the provisioning job, the account gets disabled but the groups are not removed.

We have done the  connection config at endpoint level:

Also in Disable account json we have set:

 "deleteAllGroups": true

However, only disable account is happening but groups are not getting removed.

Error:

[adarshk]

Please validate if delete Links is set to TRUE

If the issue still persist, please share the Disable/Remove Account JSON and Status threshold Config

[AshishDas · Accepted solution]

Setting  "deleteAllGroups": "Yes" instead of true worked

[Manu269 · Accepted solution]

@AshishDas As per this :

Configuring the Integration for Provisioning and Deprovisioning Accounts (saviyntcloud.com)

Defining an Action for Account Removal

Example 2: To delete all groups associated with the account and move the user to the specified OU, use a format similar to the following:. 

{
"removeAction": "SUSPEND",
"moveUsertoOU": "OU=CloudUsers,DC=abccompany,DC=com",
"deleteAllGroups": "Yes",
"userAccountControl": "514"
}