Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Automate removing a user from User Groups

Claudio_Origin
New Contributor II
New Contributor II

Hello, can we automate somehow the removal of a user (say a Terminated user) from a User Group.

If we use an actionable report, which Allowed Action would remove an inactive user from a user group?

Can we use a User Update Rule that we can trigger on termination? What action is available to do this once the condition is met? This SQL will pick up inactive users still joined to User Groups.

 

select
ug.user_groupname as 'UserGroup_Name',
u.username as 'Inactive_username',
u.firstname, u.lastname, 
u.enddate as 'Termination_Date'
from user_groups ug
   INNER JOIN usergroup_users ugu on ugu.user_groupkey = ug.usergroupkey
   INNER JOIN users u on ugu.userkey = u.userkey
   WHERE
  u.statuskey = 0 ;

 

3 REPLIES 3

rushikeshvartak
All-Star
All-Star

Use User update Rule 

rushikeshvartak_0-1673316231760.png

 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Thank you Rushikesh, but which action will remove the user from the UG? The Deprovision Access? or Transfer Ownership (don't think so).

Transfer will replace & de provision will remove if you have specified query/ api to remove user from group in connection 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.