SAP Account Lock

[vivekmistry]

Use Case: We have to lock the Account for SAP application

We are using SAP connector where we only have option of update account Json. We are generating the Update account task using actionable analytics.

Any idea how to update the user lock value to 64 in SAP using update account Json.

[rushikeshvartak]

You need to use disableAccount action

[vivekmistry]

We need to create disable account task, but how that will work with update account Json, as there is no disable account Json in the connector.

We are using this:

[rushikeshvartak]

You can create from analytics. You may not be able to create from update account json

[vivekmistry]

Hi Rushikesh,

If we use the TERMINATED_USER_ROLE_ACTION parameter to set the user's roles an End Date (instead of removing them) when task is created through Analytics: 

${task.source.equalsIgnoreCase('ANALYTICS')?'ENDDATE':'REMOVE'}

We have more scenario to complete where we have to delete the user using analytics.

What could be the best logic in this attribute to trigger lock using analytics, also delete the user using other analytics which should not affect any other process.

[rushikeshvartak]

Conditional does not working in SAP

${task.source.equalsIgnoreCase('ANALYTICS')?'ENDDATE':'REMOVE'}

[vivekmistry]

We used this condition:

${task.source.equalsIgnoreCase('ANALYTICS')?'ENDDATE':'DELETE'}

test1:

Actionable analytics created disable account task. Account gets locked setting lock status as 64.

test2:

Actionable analytics creating remove account task, user is not getting deleted from target.

test3:

Directly using ARS to delete user, task created but user is not getting deleted.

Please let me know if you have any thoughts.

[rushikeshvartak]

Conditional logic in terminated user action is not supported.

Raise idea ticket 

[vivekmistry]

In That case, if there is a requirement for disable/lock for SAP account, then to delete the account after few days which is not possible from saviynt?

[rushikeshvartak]

• You can perform via analytics

[vivekmistry]

Yes we are able to disable the account using same logic but not able to delete neither via actionable analytics nor via ARS.

[vivekmistry · Accepted solution]

Worked using this Solved: SAP Provisioning - Handling multiple values in TER... - Saviynt Forums - 52227