Service Account Campaign Without Entitlement

[Mahak_Acharya]

Hi,

Our requirement is to perform a Service Account Campaign where we only want to review Base Service Accounts and not go through Step 2 of access Approvals. 

Could anyone confirm if entitlement/access validation is mandatory for service account campaigns.

Thanks,

Mahak

[naveenss]

Hi @Mahak_Acharya choose the below highlighted configurations to only certify base accounts for service account campaign.

[Mahak_Acharya]

Hi Naveen,

We have tried this configuration but this also only allows us to choose whether the accounts Belongs to Me or Doesnot Belong to Me.
We are unable to trigger Remove Account tasks using these options and would need something that triggers Base Account removal Task from the certification.

[pmahalle]

@Mahak_Acharya ,

Make sure you have selected Accounts in Objects to be included in Certification like below:

Also, enable Create Revoke Tasks for Revoked/Conditional Certified Acc. & Ent. on Locking under Configurations-->Revoke Tasks

[naveenss]

Hi @Mahak_Acharya for this, you need to perform two step approach. 

Also, as suggested by @pmahalle select only accounts in the objects to be certified configuration. 

Enable Create Revoke Tasks for Revoked/Conditional Certified Acc. & Ent. on Locking under Configurations-->Revoke Tasks.

Once this is configured, in the step 2 of the certification, you will see the option to remove account. Upon locking the campaign, the remove account task shall be created. 

[gurpreetchanna]

Hi @naveenss  @pmahalle , we have tested the suggested configurations. If an entitlement is not assigned to the service account, it does not show up at step 2. 

Also, if we assign an entitlement, and take action to revoke at step 2, it initiates a remove access task instead of remove account. 

[naveenss]

@gurpreetchanna can you share the configurations? This is working fine on 24.4

[pmahalle]

@gurpreetchanna Working for me as well. Share the campaign configuration screenshots.

[gurpreetchanna]

Hi @naveenss , below are the snips of configurations we are trying. As mentioned earlier, without entitlement , accounts are not showing at step 2 

[rushikeshvartak]

• I have tried below configuration and its working v24.4
• Results 
• 

Configuration :