Delete Account Task is not updating the status in Account section

[h_sapkota]

Hi Team,

We have a requirement of triggering the Remove Account task for all the terminated users and trigger disable Account Task for the Active Directory. 

We are triggering the Disable Account task from the User Update Rule on Leaver process and then using Actionable Analytics, we are triggering the Delete Account Task for all the Application except the Active Directory. These Applications consists of disconnected and Connected as well.

Now, We can see task for Delete Account being created via Actionable Analytics. However, on trying to complete the Delete Account Task for the Disconnected Application, Task is getting completed but the status of the Account remains unchanged. 

When we trigger Remove Account Task via User Update Rule, We can complete the task and status is also getting changed for Remove Account Task.

Note: We have 100 plus applications hence entering all the application name for Deprovision Access Action in User Update Rule is not feasible. Hence we choose this Actionable Analytics route. But The Delete Account Task is not working as expected.

Let us know how can we resolve this issue.

Regards,
Hitesh Sapkota

[rushikeshvartak]

Could you kindly provide a detailed snapshot of the information extracted from the logs, encompassing errors and other pertinent functionality details encountered during the execution of this process? Your assistance in furnishing this information would greatly aid in the analysis and resolution of any issues .

Please share screenshot of task

[h_sapkota]

Hi Rushikesh,

The use case we were looking is resolved by using the Deprovision Account action. However, I have noted that Delete Account task is only picked by the Connected Application to complete it.

Regards,
Hitesh Sapkota

[NM]

Hi @h_sapkota, what do you mean by complete is it not changing account name and status for disconnect application..

[h_sapkota]

Hi @NM ,

Yes when trying to complete the delete account task for disconnected application, I noticed task is getting completed but status is still active or manually provisioned. (Not changed)

Regards,
Hitesh Sapkota

[rushikeshvartak]

You can raise enhancement ticket for same.

[rushikeshvartak]

You can schedule enhanced query to change account name and status of identified accounts 

[itinjic]

Based on your requirement, it seems like you want to trigger the Remove Account task for terminated users and the Disable Account task specifically for Active Directory.

To achieve this, you can follow these steps:

1. Create a User Update Rule to disable the user accounts for terminated users. In the Action section of the User Update Rule, select "Disable User" and "Disable Account". Configure any conditions necessary for identifying terminated users.

2. For Active Directory, you can exclude it from the User Update Rule by not selecting the "Disable Account" action for Active Directory endpoint. Instead, you can manually trigger the Disable Account task for Active Directory separately, if needed.

3. For the remaining applications where you want to trigger the Remove Account task, you can use Actionable Analytics. Create an analytics report that fetches all the terminated users' accounts in those applications.

4. In the Action section of the analytics report, select "Remove Account" as the default action. This action will trigger the Remove Account task for all the accounts returned by the report.

5. Create a RunAllAnalytics job trigger for the analytics report. This trigger will execute the analytics report and generate the Remove Account tasks.

Make sure to configure appropriate task mappings and workflow approvals if required.

Regarding the issue you mentioned about the Delete Account task not changing the status of the account, please ensure that the task is set up correctly with the correct endpoint and account mapping. Additionally, check the workflow and any approval steps associated with the task to ensure they are configured correctly.