Service Account and Group Ownership Transfer during Leaver Event

[cdavis2]

I am setting up the Leaver envents and I have the use case to transfer ownership for any user that has a service account or group ownership to the users manager. Is there a way to achieve this during the Leaver Event process?

[CR]

@cdavis2   we don't have automation above scenario.

[rushikeshvartak]

You can achieve same using user update rule --> Transfer Ownership 

• Replace Owner in Service Accounts: Used to replace the Ownership for Service Accounts when a user is terminated. Original user who is the Owner for Service Accounts will be replaced by the OwnerOnTerminate user as the service account owner.

Please note it only changes in saviynt and not in target

https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter05-Policies/Creating-User-Up...

[cdavis2]

I like this route is there a way to map attributes to the populate the Service Accounts ownership and or group ownership?

[rushikeshvartak]

Please elaborate with example

[cdavis2]

So for group ownership in AD we have the attribute managedby which I am pulling in to a custom property. Can I map that attribute to the Owner tab?

[cdavis2]

For both Groups and Service Accounts?

[rushikeshvartak]

Its not supported please raise idea ticket. we are mapping one time using import sheet and next time onwards it will be managed by saviynt.