05/18/2023 04:19 AM
We have a use case for updating service account owners in Saviynt. We have already reconciled the owner's DN in one of the customproperty of the service account. How do we update the owner from the account customproperty?
I was reading the other forums and found that the SavforSav connector can be used to map the owners of service accounts. If someone has done that before, can they share the working XML they used? I didn't find any documentation or sample XML to map the service account owners.
05/18/2023 07:59 AM
Why don't you directly update the owner in saviynt as part of the recon?
Thanks
05/18/2023 09:22 AM
Saviynt doesn't support the update/add of the service account owner during recon.
05/18/2023 02:28 PM
Sorry, my bad. I mis read as entitlement owner update. Can you update the owners of service account via CSV
You can achieve this by CSV Upload. Please refer the below document where you can find the sample CSV file and the steps.
Thanks.
05/19/2023 08:12 AM
CSV import is a manual process, if we get a new service account, we have to update the owner again through CSV import. I'm looking for ways to automate this process.
06/06/2023 08:30 AM
Hi Vipul,
Have you got any resolution for this? We too have same requirement looking for a solution.
Thanks,
Smitha
06/06/2023 10:50 AM
Have you explored Sav to Sav option?
06/08/2023 12:37 AM
Hi Devang,
Yes, Sav for sav DB option is not possible coz DB connector doesnot support account owner update.
After refering to below discussion, we did try sav for sav REST option but that doesnot seems to be possible. Please let us know if its feasible throgh REST APIs. Any sample JSONs for the same is appreciated.
https://forums.saviynt.com/t5/third-party-access-governance/how-to-update-service-account-s-owner-in...
Thanks,
Smitha
06/08/2023 02:06 PM
I havent tried using REST but the API provided in the mentioned link does work. I was able to update the owner with updateAccount API call. Below body for reference:
06/06/2023 03:02 PM
You need to use custom query solution or custom jar. As saviynt db connector does not allow mapping account owner using sav4sav