O365 Connector - Account threshold setting

[Abhay_Yadav]

Hi All,

We have a requirement to un-correlate inactive accounts from Identity. This is for Rehire use case, on rehire for birthright to work properly old application accounts should not be mapped to identity. We are creating new entra account on rehire.

Can you please help us with below queries:

1. How can we set Status_Threshold_Config in O365 connector for sharepoint. Need to set it as below with "correlateInactiveAccounts": false as the setting.

{"statusAndThresholdConfig": {
"statusColumn": "customproperty11",
"activeStatus": [
"false"
],
"deleteLinks": true,
"accountThresholdValue": 10,
"correlateInactiveAccounts": false,
"inactivateAccountsNotInFile": true,
"deleteAccEntForActiveAccounts": false
}}

2. If above is not possible is there a way to filter out disabled Sharepoint accounts in O365 connector and not import them at all. Or if we can filter them based on any attribute that would also work.

Regards,

Abhay Yadav

[rushikeshvartak]

You can't uncorrelated the account once its mapped in import 

[NM]

Hi @Abhay_Yadav you can do a one time thing and un- correlate the account via csv

[rushikeshvartak]

You can overwrite / replace but can’t u correlate using csv

[Abhay_Yadav]

Hi @rushikeshvartak , @NM ,

We would like to avoid any kind of manual intervention in LCE and birthrights.

Accounts for other application gets uncorrelated if i use the above threshold json. 

In O365 there is one more issue, it imports Azure AD groups also. Now during termination the tasks for Azure Ad account and access deprovision gets created for and Same Azure AD groups deprovisioning tasks gets created for Sharepoint as well. Sharepoint tasks fails because Azure AD tasks would have already removed the access.

Is there a way to not generate tasks on deprovisioning for certain entitlement types or not import Azure AD groups in Sharepoint O365.

Regards,

Abhay Yadav

[rushikeshvartak]

• What is connector type ?
• You can use enhanced query to discontinue such tasks 

[Abhay_Yadav]

Hi @rushikeshvartak ,

Connector type is Office 365

Regards,

Abhay Yadav

[rushikeshvartak]

You need to use enhanced query

[Abhay_Yadav]

Hi @rushikeshvartak.,

Enhanced query can be used to discontinue the tasks that's fine.

What can we do for not importing terminated/disabled accounts in O365 for sharepoint.

Regards,

Abhay Yadav

[rushikeshvartak]

I don't see any configuration available in OOTB Connector.