Update Owner and Primary Certifier of the service account using Enhance Query

[gurpreetchanna]

Hi, 

I am working on a new integration, where in we need to import the service accounts from AD. The owner of the service accounts is stored in manager attribute of the AD object. We are bringing in this information in CP21 of the account. 

Once the account import is run, how can we set the account owner also as a primary certifier. 

We tried using the Enhance query execution, but as per Saviynt support response, RANK is reserved keyword, and this cannot be done via Enhance query. 

Is there any other approach to the use case as this is a very standard requirement. 

[pmahalle]

Hi @gurpreetchanna ,

Yes you can do it using CSV import. 

Refer below forum post: https://forums.saviynt.com/t5/identity-governance/adding-service-account-owner-using-csv-file/m-p/94...

[gurpreetchanna]

Hi @pmahalle 

Is there any other recommended approach except CSV, as there are more than 10K service accounts. 

We also have a new service account use case, where new service accounts are created via API call, now within API call , we can set RANK between 1-5 but not as 'Primary Certifier'. Now to set them as Primary certifiers, this will become a manual task. 

[rushikeshvartak]

You can use sav4sav for achieving this 

[gurpreetchanna]

Hi @rushikeshvartak 

In Saviynt APIs we have limitation that RANK can only be set between 1-5. Even with SAV 4 SAV using REST we will have this limitation? 

[gurpreetchanna]

Hi @rushikeshvartak  @pmahalle 

Is there any way we can set owner of the service account during import. We can set entitlement owner during import , Can we achieve same for service account ?

[pmahalle]

@gurpreetchanna ,

There is no way to import account owner like we do for entitlement owner.

[rushikeshvartak]

Sav4sav is rest api call and you can perform. During import you can’t 

[gurpreetchanna]

Hi @rushikeshvartak , 

With Sav4 Sav we can set owners , but can we set them as primary certifiers . I have tested the API, it only accepts RANK between 1-5