Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Analytics - Disable Dormant AD Accounts

Huddos
New Contributor III
New Contributor III

Hi,

 

I have copied the default Analytics Dormant Accounts - Active Directory and set up an analytics job with the below query:

SELECT u.username AS 'Username', u.jobcodedesc AS 'Position Title', u.customproperty15 AS 'customproperty15', a.accounttype AS 'accounttype', u.FIRSTNAME AS 'User First Name', u.LASTNAME AS 'User Last Name', e.DISPLAYNAME AS 'Application Name', name AS 'Account Name', a.lastlogondate AS 'Last Logon', DATEDIFF(CURDATE(), a.lastlogondate) as 'Days Since LastLogin', CASE WHEN (a.status = 1) THEN 'Active' ELSE a.status END AS 'Account Status', e.endpointKey, a.accountkey as 'acctKey', 'disableAccount' as 'Default_Action_For_Analytics' FROM accounts a, user_accounts ua, users u, endpoints e WHERE ua.accountkey = a.accountkey AND u.userkey = ua.userkey AND e.endpointkey in (3) AND a.endpointKey = e.endpointKey AND a.status IN ('1' , 'Manually Provisioned', 'Active') AND DATEDIFF(CURDATE(), lastlogondate) >= 90 AND lastlogondate IS Not NULL AND u.customproperty15 is NULL order by lastlogondate asc

Results are displaying the correct records when reviewing the history of the analytics job and its also correct in data analyzer.

I have included 'disableAccount' as 'Default_Action_For_Analytics' FROM accounts a.

I have created a RunAllAnalyticsJob in Job Control Panel, including categories ALL and Execute Default Action for Analytics is ticked. 

The accounts do not get disabled.

 

TIA

 

 

12 REPLIES 12

rushikeshvartak
All-Star
All-Star

Account needs to be attached to user. You can attach user to admin user and test it will work. This looks like defect please raise support ticket


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi Rushikesh

Each AD account is attached to an active Saviynt user.  See attached. Raise Defect?

thanks

Please share 

  • Report and job config

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi Rushi

See attached, thanks

in allowed actions just keep disable account


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Same, No tasks created after job runs to disable, seems to spawn to child jobs V1 and V2, see attached. thanks

Please create job with below configs 

rushikeshvartak_0-1715661501667.png

 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi,

I don't have that option "Actionable Reports". thanks

You can ignore that for your case.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

OK, so there is no change then. Its the same as yours except I have "All" for Analytics Categories and no subcategories. Any other ideas? thanks

try with simple query

select a.name,a.accountkey as acctKey, endpointkey, 'disableAccount' as Default_Action_For_Analytics from accounts a where accountkey=1111 limit 1


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Same result unfortunately, the parent job and v2 job never update status to success.