Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

remove user account correlation, make all accounts orphan

rajsannidhi
Regular Contributor
Regular Contributor

We created a new AD endpoint, for user account correlation rule we used user company attribute to match with customproperty attribute on the account which caused lot of incorrect mappings.

(users.username) = accounts.name OR (users.companyname) = accounts.CUSTOMPROPERTY27

We tried removing the user account correlation rule, ran account imports but accounts are still correlated to incorrect users

Is it possible to make all accounts orphan and then update user account correlation rule, later run account import jobs or any other options to resolve this issue?

Thank You.

3 REPLIES 3

Saathvik
All-Star
All-Star

@rajsannidhi : There is no straightforward way to do this. We have option to override the correlation as part of import using csv but no option to uncorrelate the user. Since you are in 5.5.x version. Only way I can think of is using custom query job update user_accounts table and make user key as null for such accounts


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.

rajsannidhi
Regular Contributor
Regular Contributor

@Saathvik Thank you for the details, yes I tried account upload selecting "YES for Overwrite User Assigned" as below, with blank user owner. It didn't work, tried 'Update & Add' also for operation column

Account Nameowner userendpointoperation
ABCD XYZupdate
XYZS XYZupdate
 
rajsannidhi_2-1697481797092.png
I tried below custom query, but its not working, am I missing anything ?

 

Update saviyntaws.user_accounts ua
join saviyntaws.accounts a on ua.accountkey = a.accountkey
join saviyntaws.endpoints ep on a.endpointkey = ep.endpointkey
set ua.userkey='null'
where ep.endpointkey IN ('11')
and a.accountkey IN ('1564')
 

rajsannidhi
Regular Contributor
Regular Contributor

@Saathvik joined users table, this also didn't work 

Update saviyntaws.user_accounts ua
join saviyntaws.users u on ua.userkey = u.userkey
join saviyntaws.accounts a on ua.accountkey = a.accountkey
join saviyntaws.endpoints ep on a.endpointkey = ep.endpointkey
set ua.userkey=null
where ep.endpointkey IN ('63')
and a.accountkey IN ('172811')