Automate inactive account deletion

[omth]

Hi,

We are trying to automate the deletion of GPUAD accounts that have been inactive for 90 days. Currently,  we are using an analytic, but we got this after running it:

As you can see, the deletion task has not been created. Is there a way to trigger a deletion task through analytics? Or which other method can we use to automate account deletion?

[NageshK]

@omth I have requested for this post to be moved to IGA so that the right team can check and respond. 

Thanks,

Nagesh K

[dgandhi]

Actionable analytics would be the solution for your issue. Please refer below

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter16-SSM-Analytics/Managing-An...

Deprovision Account

When Deprovision Account is configured as an allowed action, it deprovisions account of a user from SSM. When this action is performed on a record, a task is created for deprovisioning the account in the target application.

For example, a Box connector account of a user who is no longer with the organization is assigned to an admin or a service account.

The Analytics query must have the columns given below:
acctKey - Stores accountkey of the account which has to be deprovisioned.

Sample query:

• Schedule from Run All V2 Analytics Job

SQL

select a.name,a.accountkey as acctKey, endpointkey, 'deprovisionAccount' as Default_Action_For_Analytics from accounts;

• Schedule from Run All V1 Analytics Job

SQL

select a.name,a.accountkey as acctKey, endpointkey, 'Deprovision Account' as Default_Action_For_Analytics from accounts;

Thanks

[omth]

Hi,

Thank you for your answer, it is already what we tried, but it didn't work. I forgot to mention it first, but we're trying to delete accounts that are inactive, and it seems that it's impossible to create tasks on inactive accounts this way. So my question is, is there a way to still trigger the task through analytics, and if not, which other methods exist to delete an account?