Enddate for Service Accounts

[AshishDas]

Hi,

 We have a requirement that when a service account reaches it's 90 days period of inactiveness (after being disabled), A remove Account task should trigger and this will delete the service account from the Disabled Users OU in AD.

To trigger the remove account task we can achieve it via Actionable analytics. However, the issue is whenever a Service Account is disabled, is there anyway we can store it's enddate in any of it's account properties based on which the Actionable Analytics will be able to calculate it's 90 days interval?

The Service Account will be disabled via the Manage Service Account tile and there isn't an option to enter it's end date.

[pruthvi_t]

Hi @AshishDas ,

Greetings.

Let me check on this and get back to you. Thanks for your patience.

[AshishDas]

Any update on this?

[pruthvi_t]

@AshishDas ,

You can try to populate the enddate with current date as part of json to disable the service account and store it in a custom property. Then you can query on the custom property as part of analytics.

Please try this and let us know if it helps. 

Thanks,

[rushikeshvartak]

You can use update Account Action to store in accounts customproperty

https://docs.saviyntcloud.com/bundle/EIC-Admin-v2022x/page/Content/Chapter17-EIC-Analytics/Configuri...

Update Account

When Update Account is configured as an allowed action, it updates an account in EIC. When this action is performed on a record, an Update Account task is created for updating the account in the target application.

The Analytics query must have the columns given below:
acctKey - Stores accountkey of the account which has to be updated.

Sample query:

• Schedule from Run All V2 Analytics Job

SQL

select a.name,a.accountkey as acctKey, endpointkey, 'UpdateAccount' as Default_Action_For_Analytics from accounts a;