We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

Automate inactive account deletion

omth
New Contributor II
New Contributor II

Hi,

We are trying to automate the deletion of GPUAD accounts that have been inactive for 90 days. Currently,  we are using an analytic, but we got this after running it:

omth_1-1683641188589.png

As you can see, the deletion task has not been created. Is there a way to trigger a deletion task through analytics? Or which other method can we use to automate account deletion?

 

 

3 REPLIES 3

NageshK
Saviynt Employee
Saviynt Employee

@omth I have requested for this post to be moved to IGA so that the right team can check and respond. 

Thanks,

Nagesh K

Actionable analytics would be the solution for your issue. Please refer below

https://docs.saviyntcloud.com/bundle/SSM-Admin-v55x/page/Content/Chapter16-SSM-Analytics/Managing-An...

 

Deprovision Account

When Deprovision Account is configured as an allowed action, it deprovisions account of a user from SSM. When this action is performed on a record, a task is created for deprovisioning the account in the target application.

For example, a Box connector account of a user who is no longer with the organization is assigned to an admin or a service account.

The Analytics query must have the columns given below:
acctKey - Stores accountkey of the account which has to be deprovisioned.

Sample query:

  • Schedule from Run All V2 Analytics Job

SQL
select a.name,a.accountkey as acctKey, endpointkey, 'deprovisionAccount' as Default_Action_For_Analytics from accounts;
 
  • Schedule from Run All V1 Analytics Job

SQL
select a.name,a.accountkey as acctKey, endpointkey, 'Deprovision Account' as Default_Action_For_Analytics from accounts;
Thanks
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

omth
New Contributor II
New Contributor II

Hi,

Thank you for your answer, it is already what we tried, but it didn't work. I forgot to mention it first, but we're trying to delete accounts that are inactive, and it seems that it's impossible to create tasks on inactive accounts this way. So my question is, is there a way to still trigger the task through analytics, and if not, which other methods exist to delete an account?