Handling 2 Accounts on AD

[snehaadumalli]

Hi Team,

User has 2 AD accounts, 1 is their primary ID, and the secondary is considered as XID account
we want to know how can we customize the addition or removal of AD Groups on the XID account based on the addition/removal of roles
so we want to limit what entitlements are automated to users who have more then 1 ad account

[timchengappa]

Hi @snehaadumalli 

Provided the 2 types of accounts(for a user within an endpoint) are already imported into Saviynt you can explore the option to use advanced query and then assign entitlements as required...

Query: a.username in (select username from users u
join user_accounts ua on u.userkey=ua.userkey
join accounts a on a.ACCOUNTKEY = ua.ACCOUNTKEY and endpointkey = 6 group by endpointkey having count(*) <2 )

[snehaadumalli]

Hi Team, 

Thanks for the reply.

Can you please help me to navigate to the option where we have to pass advanced query ?

[snehaadumalli]

We are hoping this config has to go on technical rules advanced query option?

[timchengappa]

Hi @snehaadumalli Yes, it is in the advanced configuration of technical rules.