Privileged Account Creation in AD

[sabthamis]

Hello All,

We have a requirement to create AD account for the users (which is the privileged account say EA / DA /SA account) apart from their personal account. This EA / DA/ SA will be requested from Access Request page and provisioned in AD once after all approvals.

We have a AD connection (security system, endpoint, connection) created already.  What woulbe be best approach here ? Can we separate AD connection with new  security system, endpoint, connection ? Also once the access request is raised we need to specify the account name on the AD account created as "EA-username" if user is requesting for EA account then as "DA-username" if user is requesting for DA account then as "SA-username" if user is requesting for SA account. 

Can we add dynamic variable while requesting based on the selection the create JSON creates the AD account.

Any help on this is much appreciated. 

Thanks,

Sabthami Subramanian

[AmitM]

Hi @sabthamis , How about using service accounts as service account in Saviynt instead normal accounts?

https://docs.saviyntcloud.com/bundle/AD-v24x/page/Content/Configuring-the-Integration-for-Provisioni...

Search : To utilize a single JSON to support generic account and service account creation

Thanks,

Amit

If this answers your query, Please ACCEPT SOLUTION and give KUDOS.

[sabthamis]

Thanks for responding. I will go through the link.

But still one thing is not clear, For this do we need to create a separate connection from the one AD connection existing already ?

[rushikeshvartak]

You can create separate connection to keep configuration clean

[sabthamis]

@AmitM @rushikeshvartak - Thanks for your response. So here the user can raise request for any three type of accounts (DA/EA/SA). how this can be archived do we need to add dynamic attribute in the request form to select which account they request for ? or any other way to achieve this ?

Thanks

[rushikeshvartak]

You can use service account module

[sabthamis]

Hi Rushikesh,

Under which section this functionality is present. Can you please help me here.

Thanks