Service Account Ownership change - Change ownership to LM

[gurpreetchanna]

Hi, 

We want to change ownership of service account to Inactive owners Line manager. I am aware that using User update rule , ownership of a service account can be changed to LM. But out environment has many types of Service accounts and custom implementation. 

Is there any way to restrict it to a particular service account type? or if there is any other solution to change ownership to inactive certifier's LM during campaign instead of default certifier?  

[NM]

Hi @gurpreetchanna , what do you mean by custom implementation  ?? Is it custom jar?

[gurpreetchanna]

Hi @NM , 

We dont have a custom jar ,  but there are other complex modules making use of internal DB jobs. To be precise, we have multiple types for Service Accounts. And we want to restrict user update rule (ownership transfer) to a one service account type. 

[rushikeshvartak]

OOTB there is no configuration other than default certifier

[gurpreetchanna]

Hi @rushikeshvartak , 

is there any other approach that can be taken to change ownership of account ... using Sav4 Sav REST ? 

[rushikeshvartak]

• You can use Sav4Sav using analytics report to update ownership

[gurpreetchanna]

Hi @rushikeshvartak 

Sav4Sav REST will require security system to make use of REST provisioning connector. But we already have a provisioning connector configured i.e. Win PS. how will this approach work ? 

[rushikeshvartak]

You can map service account owner to saviynt account and call saviynt rest api

[gurpreetchanna]

hi @rushikeshvartak , can you please elaborate more on the suggested approach. How we can map service account owner to Saviynt account , how this sync of data will work.

[rushikeshvartak]

• Consider you are using saviynt4saviynt
• now add endpoint-accountname-rank as entitlement for account
• based on it manage ownership transfer