Disable Account if Particular Account not having any entitlements mapped to It for Disconnected Apps

[gagan94]

Hey,

Is there any way to disable those users which are not having any entitlements mapped to thier account,

We have to do it only for Disconnected Applications.

Can Anybody have any idea how we can achieve this.

Regards

Gagan

[Manu269]

Can you please reconfirm if you need to disable the SSM user profile or the specific endpoint account where the user does not have any entitlement mapped?

If it the case around account specific entitlement then try to follow this article : https://saviynt.freshdesk.com/support/solutions/articles/43000606546-configuring-allowed-actions#Con...

[gagan94]

Hey,

Yes Account to that particular endpoint needs to be disable if account is not having any of the entitlements.

Regards,

Gagan

[rushikeshvartak · Accepted solution]

For disable account you can do using actionable report.

https://saviynt.freshdesk.com/support/solutions/articles/43000606546-configuring-allowed-actions#Con...

• select a.name,a.accountkey as acctKey, endpointkey, 'disableAccount' as Default_Action_For_Analytics from accounts a where a.accountkey not in (select accountkey from account_entitlements1);

If you want to remove account then - Global Configuration - Request -Remove Accounts Having No Access After provisioning Remove Access Task(s) if the Account has no remaining Access, Account would also be removed