Saviynt Forums

HarishG · ‎10/23/2022

Hi,

Could you please help me with DISABLEACCOUNTJSON for AD to move the user to different OU and then disable the account.

current DISABLEACCOUNTJSON:

{
"userAccountControl":"514"
}

Best regards

Harish

rushikeshvartak · ‎10/23/2022

{
"moveUsertoOU": "OU=DeletedUsers,DC=abccompany,DC=com",
"deleteAllGroups": "Yes",
"userAccountControl": "514",
"password": "${randomPassword}"
}

Refer :

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

HarishG · ‎10/23/2022

We need to remove access of the user from all groups except one group. Could you please suggest how we can achieve this?

Best regards

Harish

rushikeshvartak · ‎10/24/2022

I don't think you can restrict specific may be AD permission to group can help from AD Team side

Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

Manu269 · ‎10/25/2022

Hello,

Refer : DISABLEACCOUNTJSON

While access revocation its not possible to filter out the specific group.

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

Move to different OU using DISABLEACCOUNTJSON AD connector