Disable User without creating Remove Account tasks

[ASA]

Hi all,

when we user "Disable User" action in user update rules, it implicitly creates remove account tasks for all the users accounts. Is there a way to just disable the user (so they can't log into Saviynt) and nothing else?

I can imagine it working via Saviynt4Saviynt Connector and disable account but before I try maybe anyone knows if this will behave as intended or has an easier solution.

Thanks!

[pruthvi_t]

Hi @ASA ,

Greetings,

By the product design, when you select 'disable user' action in the user update rules, it will create remove account tasks for all the active accounts of the user as well as user will be disabled in the target. 

Documentation link for the same: https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter05-Policies/Creating-User-Up...

Thanks,

[ASA]

yes, I know. I'm looking for a way to avoid it.

[dgandhi]

I can think of below option. Can you please configure something like below in your JSON?

{

"removeAction": "${if(task.source == 'ONECLICKDISABLE'){'SUSPEND'} else {'DELETE'}}",

Thanks

[ASA]

Hi Devang,

which JSON would that be? I can imagine adapting the JSONs for remove account of each connection to do nothing, but then we loose the ability to remove accounts alltogether.

[dgandhi]

REMOVEACCOUNTACTION 

Thanks

[DBorchers · Accepted solution]

Hello,

we have found a solution to our problem elsewhere. By setting "User Termination from Imports = disabled" in the global settings. Now the user can be disabled without deleting the roles directly.

Greetings

David