Info on REUSEACCOUNTJSON in AD

[Srikanth]

Team,

I am looking for more information on REUSEACCOUNTJSON in AD. Following are some of my questions. Appreciate if someone can look into them and provide answers.

1. How can REUSEACCOUNTJSON be triggered ?
2. Is there a specific action in user update to trigger this ?
3. Just like after enable actions / after move actions which are supported in enable/disable act json, do we have any support for after move actions here ?
4. Does saviynt automatically enable the account once it detects an inactive account ?
5. Can there be more information provided on this statement - "Specify attributes to be checked in the specific organization unit (OU) for moving the account for reuse. "

[rushikeshvartak]

1. How can REUSEACCOUNTJSON be triggered ? This is used to use same accountname in AD
2. Is there a specific action in user update to trigger this ? No. if existing account with suspended status & not exist in AD then account name can be reused. New Account Request from user update will use this json internally
3. Just like after enable actions / after move actions which are supported in enable/disable act json, do we have any support for after move actions here ? No. what are trying to achieve  updating some property in AD ?
4. Does saviynt automatically enable the account once it detects an inactive account ? No
5. Can there be more information provided on this statement - "Specify attributes to be checked in the specific organization unit (OU) for moving the account for reuse. " This is used to check if account already exist or not in above freshdesk example its checking account is disable & cn & sn is not used.

[Srikanth]

Thanks for your response.

1 - can you give steps or more clarity on how the reuseaccountjson is triggred ? its unclear from your response on how its invoked. Its also not mentioned in FD, what will be the account status after its moved to a OU when this json is triggered ?

2 - you mentioned "not exist in AD", does reuseaccountjson come into picture for deleted accounts too ? Also, if I submit a access request for the user, how is the existing account (disabled state) will be picked up instead of saviynt triggering new account name for same user ?

3 - for example, to change some AD attribute, reset password flag, set password etc ?

[rushikeshvartak]

1. This will be used whenever before it will try to create /update account 

2. yes suspended from import service status accounts name will be considered for reuse.

3. No