Remove access of AD groups except one

[HarishG]

Hi,

There is a requirement that during disable of AD account of a user, the user should be removed form all the groups(accesses) except a particular group(XXX). Could you please suggest how to achieve this ?

Best regards

Harish

[avinashchhetri]

@HarishG,

OOB Configurations allows you to either keep all groups or revmove all groups, you cannot pick and choose.

[rushikeshvartak]

You can delete all group or none group while remove account.

https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g... 

you may use removeAction option if you want to suspend account by setting some attributes 

or if you want to exclude specific group check with AD Admin if they can restrict access on service account for deletion for particular group

[HarishG]

Thank you @rushikeshvartak and @avinashchhetri ,

Is it possible to remove the groups(entitlements) using Analytic report?

Best regards

Harish

[rushikeshvartak]

Yes you can remove from actionable analytics with de provision Access option 

refer example

 https://saviynt.freshdesk.com/support/solutions/articles/43000606546-configuring-allowed-actions#Con...

[Manu269]

Saviynt OOTB Feature allows either keep all groups or revmove all groups.

Anyhow for specific group removal, Actionable Analytics is the only option.