Owner of Account Attestation Campaign

[ryoder]

We have some manually created Azure AD Guest Accounts that we would like to build an attestation campaign for in Saviynt. We planned to add the identity username of the "owner" of the Guest Account in a Azure AD property to be pulled in to Saviynt as a customproperty on the account object.

Ideally the certifiers list would be queried from the customproperty of those account objects. We don't necessarily need to be able to delete or disable action, but would like to at least be able to export the attestation results.

Is this possible to do? The Guest accounts would not have identities in Saviynt. Tried experimenting with a user manager attestation, but it doesn't seem like it's possible, and we were trying to avoid having the guest accounts as identities.

[rushikeshvartak]

You can try service account campaign 

[jayasudha]

Hi,

Without the user identity in saviynt, user manager campaign is not possible.

And for service account campaign, you need to map the owner to the service accounts to launch the certification. We cannot drive it off property, identity has to be created in Saviynt to launch service account campaign too.

Hope this helps.

Thanks and regards,

Jayasudha R