How to perform Removal of privileged accounts assigned to incorrect groups through analytics?

[Pratham]

We have to configure the removal of privilege accounts assigned to incorrect groups.

[rushikeshvartak]

Use Deprovision Account Action

https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter17-EIC-Analytics/Managing-An...

[Pratham]

Hi @rushikeshvartak ,

Thanks for the reply.

Yes we can use the actionable analytics for the Deprovision account but

How to configure privilege accounts assigned to incorrect groups ?

[rushikeshvartak]

• How to configure privilege accounts assigned to incorrect groups ? -  I believe you want to detect this isn't it ?

[Pratham]

Hi @rushikeshvartak 

Yes, that's right But first we have to match the pattern of privilege accounts whether it is mapped to correct group are not ,If not then we have to remove that accounts from that group.

how we can find that the privilege accounts was mapped to correct groups?

[rushikeshvartak]

• This is something business logic you should be aware what is correct group privilege account should have

[Pratham]

@rushikeshvartak 

They didn't mention anything ,what if we want to check for the tier 2 privilege accounts with the groups(to match privilege accounts was mapped to correct groups) what will be the query for where clause?

[rushikeshvartak]

Please check with business/app team what are entitlements should be given vs what not