12/06/2022 04:30 AM
We are planning to launch a service account campaign and we were advised to set Account Type attribute to 'Service Account'.
we have around 1000+ account and doing it through CSV upload is very time consuming also we are looking for a way that will ensure this attribute is set for future accounts.
It's AD based Connector.
Solved! Go to Solution.
12/06/2022 09:15 AM - edited 12/06/2022 09:54 AM
Option 1 - Perform account import on Saviynt for Saviynt DB connection to update the account type for AD application for the accounts starts with 's-' (hope this is the naming convention for the service accounts)
Option 2 - Perform account import on Saviynt REST connection to update the account type for AD application for the accounts starts with 's-' (hope this is the naming convention for the service accounts) --> Saviynt Recommended
03/17/2023 03:58 AM
could you elaborate the second option a little bit more? The account import for the AD security system is already using AD connection. I don't quite get how we can update the same account object in Saviynt by using the account import of another connection.
04/20/2023 11:27 PM
@Enakshi we are facing the same issue for personal accounts. In our case primary and admin. The mentioned field is not set on the request form, but we have dedicated endpoints for every account type:
Endpoint1: AD Primary
Endpoint2: AD Admin
We also have dedicated AD on premise attributes, that define the account type.These values are set during provisioning in AD.
The issue is, that the wording should be different in AD on prem and in Saviynt. For example the values for the primary account would be:
Is it possible to transform those values via import or is it possible to automatically write the account type afterwards to the accounts considering a the AD on prem attribute?
04/23/2023 08:33 PM
04/24/2023 08:06 AM
@rushikeshvartak thanks for the response. Can you please elaborate a little bit on that, how this is possible for the AD account objects in Saviynt. So you telling, that we can update the values on the AD account object via sav4sav?
04/24/2023 08:33 AM
Do you want to update the account type as part of the import?
04/24/2023 11:09 AM
Hi @dgandhi, if that is possible, yes. My assumption based on the statement is, that we first need to import the AD accounts and afterwards need to import via sav4sav (which I'm still not 100% sure, if this can be achieved by sav4sav)
04/24/2023 11:12 AM
Its like database connector and where you will mention security system and endpoint name of AD Endpoint and perform data manipulation
04/24/2023 11:28 AM
1. First do AD accounts import
2. Write Sav to Sav to change the account type based on your logic/requirement. Below is the sample of the Sav to Sav. You can use this as base and modify it as per your requirement.
<![CDATA[Select a.name as name, s.SYSTEMNAME as securitysystem,e.ENDPOINTNAME as endpoint,
WHEN a.endpointkey=30 THEN 'Primary Account'
WHEN a.endpointkey=70 THEN 'Disabled Account'
WHEN a.endpointkey IN(200,210) THEN 'Service Account'
WHEN a.endpointkey IN(80,90,100,110,120) THEN 'Privileged Account'
END) as accounttypename
from Accounts a
inner join endpoints e on e.endpointkey=a.endpointkey
inner join securitysystems s on s.systemkey=e.SECURITYSYSTEMKEY
where a.endpointkey IN(30,70,130,80,90,100,110,120,200,210)]]>
<mapper description="This is the mapping field for SAviynt Field name" deleteaccountentitlement="true" ifusernotexists="noaction">
<mapfield saviyntproperty="accounts.name" sourceproperty="name" type="character"></mapfield>
<mapfield saviyntproperty="accounts.accounttype" sourceproperty="accounttypename" type="character"></mapfield>
<mapfield saviyntproperty="endpoints.endpointname" sourceproperty="endpoint" type="character"></mapfield>
<mapfield saviyntproperty="securitysystems.systemname" sourceproperty="securitysystem" type="character"></mapfield>
3. When you schedule jobs , first run the account import job and post that run your Sav to Sav DB import job.
Hope this helps!
04/25/2023 01:23 AM
Hi @dgandhi ,
really appreciate the elaborated answer! We will try to use the your example and adapt it to our current implementation and requirements.
One last question. The provided script is added to the UPDATEACCOUNTJSON right?
04/25/2023 07:32 AM