Announcing the SAVIYNT KNOWLEDGE EXCHANGE unifying the Saviynt forums, documentation, training, and more in a single search tool across platforms. Click HERE to read the Announcement.

Info on REUSEACCOUNTJSON in AD

Srikanth
New Contributor
New Contributor

Team,

I am looking for more information on REUSEACCOUNTJSON in AD. Following are some of my questions. Appreciate if someone can look into them and provide answers.

  1. How can REUSEACCOUNTJSON be triggered ?
  2. Is there a specific action in user update to trigger this ?
  3. Just like after enable actions / after move actions which are supported in enable/disable act json, do we have any support for after move actions here ?
  4. Does saviynt automatically enable the account once it detects an inactive account ?
  5. Can there be more information provided on this statement - "Specify attributes to be checked in the specific organization unit (OU) for moving the account for reuse. "

 

Srikanth_0-1662468362600.png

 

3 REPLIES 3

rushikeshvartak
All-Star
All-Star
  1. How can REUSEACCOUNTJSON be triggered ? This is used to use same accountname in AD
  2. Is there a specific action in user update to trigger this ? No. if existing account with suspended status & not exist in AD then account name can be reused. New Account Request from user update will use this json internally
  3. Just like after enable actions / after move actions which are supported in enable/disable act json, do we have any support for after move actions here ? No. what are trying to achieve  updating some property in AD ?
  4. Does saviynt automatically enable the account once it detects an inactive account ? No
  5. Can there be more information provided on this statement - "Specify attributes to be checked in the specific organization unit (OU) for moving the account for reuse. " This is used to check if account already exist or not in above freshdesk example its checking account is disable & cn & sn is not used.

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Srikanth
New Contributor
New Contributor

Thanks for your response.

1 - can you give steps or more clarity on how the reuseaccountjson is triggred ? its unclear from your response on how its invoked. Its also not mentioned in FD, what will be the account status after its moved to a OU when this json is triggered ?

2 - you mentioned "not exist in AD", does reuseaccountjson come into picture for deleted accounts too ? Also, if I submit a access request for the user, how is the existing account (disabled state) will be picked up instead of saviynt triggering new account name for same user ?

3 - for example, to change some AD attribute, reset password flag, set password etc ?

 

1. This will be used whenever before it will try to create /update account 

2. yes suspended from import service status accounts name will be considered for reuse.

3. No


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.