Hi @glegault ,
The below solution works if you are using S4S DB connector. (Refer - Solved: Re: How can we bulk update "Account Type" attribut... - Saviynt Forums - 18694)
- First do AD accounts import
- Write Sav to Sav to change the account type based on your logic/requirement. Below is the sample of the Sav to Sav ACCOUNTSIMPORT JSON. You can use this as base and modify it as per your requirement.
<![CDATA[Select a.name as name, s.SYSTEMNAME as securitysystem,e.ENDPOINTNAME as endpoint,
(CASE
WHEN a.endpointkey=30 THEN 'Primary Account'
WHEN a.endpointkey=70 THEN 'Disabled Account'
WHEN a.endpointkey IN(200,210) THEN 'Service Account'
WHEN a.endpointkey IN(80,90,100,110,120) THEN 'Privileged Account'
END) as accounttypename
from Accounts a
inner join user_accounts ua on ua.accountkey=a.accountkey
inner join users u on ua.userkey=u.userkey
inner join endpoints e on e.endpointkey=a.endpointkey
inner join securitysystems s on s.systemkey=e.SECURITYSYSTEMKEY
where a.endpointkey IN(30,70) and u.systemusername=a.name]]>
</sql-query>
<mapper description="This is the mapping field for SAviynt Field name" deleteaccountentitlement="true" ifusernotexists="noaction">
<mapfield saviyntproperty="accounts.name" sourceproperty="name" type="character"></mapfield>
<mapfield saviyntproperty="accounts.accounttype" sourceproperty="accounttypename" type="character"></mapfield>
<mapfield saviyntproperty="endpoints.endpointname" sourceproperty="endpoint" type="character"></mapfield>
<mapfield saviyntproperty="securitysystems.systemname" sourceproperty="securitysystem" type="character"></mapfield>
</mapper>
- When you schedule jobs, first run the account import job and post that run your Sav to Sav DB import job. You can also use trigger chain here.
If this helps, please select Accept As Solution and hit Kudos
