Update the Service Account Owners after import

[varunpuri]

Hi,

After we run the import from Active Directory, all the Service Accounts will get created in Saviynt.
After this step, if we have to update the owner information for all the imported Service Accounts, what is the best way to achieve this ?
Can this be done through a CSV import ? If Yes, can you please share a sample csv having the owner column too.

If No, kindly suggest an alternative solution to achieve this requirement.

Best Regards,
Varun

[DaanishJawed · Accepted solution]

Hi @varunpuri ,

Thanks for reaching out.

Yes you can achieve this by CSV Upload. Please refer the below document where you can find the sample CSV file and the steps.

https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Uploa...

Thanks.

[varunpuri]

Thank You, @DaanishJawed ,

I performed the steps explained in documentation and it worked.

Best Regards,
Varun

[dgandhi]

Hi ,

Below steps which you can follow to upload the owners for service account.

Attaching the sample which I have used. Please try that.

To upload accounts, perform the following steps:

1. Click Admin > Identity Repository > Accounts > Actions > Upload Account.

2. In the Enter Details for Account Import pop-up window that displays, specify the following parameters.

   Parameter Description

   Data File	Upload the CSV file with account details using the Select button. After file upload, the file name is displayed.
   System Name	Specify a system name. For example, AD, AWS You can also select Create System to create a new security system. Note While uploading the CSV file ensure that the ENDPOINT and 30ENTITLEMENTTYPE are associated with this security system.
   Delete Account	Delete Account Specify whether you want to remove the existing account to entitlement mappings. The options are: Yes:Removes the existing account to entitlement mapping and replaces it with new mappings specified. For example, if you have an existing account acc1 mapped to entitlement1 in EIC and you are uploading a CSV file that has acc1 mapped to entitlement2, selecting Yes removes the existing account to entitlement mapping and adds the mapping of acc1 to entitlement2.. No: Retains the existing mapping of accounts with entitlement for accounts and adds new mappings to entitlements in EIC.
   Action for Account	Specify whether you want to remove the existing account to endpoint mapping. The options are: Yes: Removes the existing account to endpoint mapping and adds the new set of accounts uploaded through CSV for the endpoint. For example, if you have 200 accounts for an endpoint and you are uploading 100 more accounts for the same endpoint, existing 200 accounts are removed from EIC and the new set of 100 accounts are added. No: Retains the existing account to endpoint mapping and adds the new set of accounts uploaded through CSV for the endpoint.
   Delimiter	Select the delimiter to be used in the data file being uploaded. The options are: Comma Pipe Tab
   First row as heading	Specify whether you want to use the first row in the CSV file as the heading. The options are: Yes: Uses the first row as the heading. No: Does not use the first row as the heading.
   Correlate Inactive Accounts	Specify whether you want to correlate inactive accounts with a user. To add a rule go to Admin > Identity Repository > Security Systems > Endpoints > User Account Correlation rule. The options are: Yes: Correlates inactive accounts with a user based on the rule. No: Does not correlate inactive accounts with a user. The default value is No.
   Overwrite User Assigned	Specify whether you want to remove the existing account to user mapping. The options are: Yes: Removes the existing account to user mapping and replaces it with new mappings specified in the file. For example, if an existing user u1 is assigned an account acc1 with entitlements e1 and e2, selecting Yes removes the mapping of user u1 to acc1 and replaces it with a mapping of u2 with acc1, and hence user u2 will have access to entitlements e3 and e4. No: Retains the existing account to user mapping and adds the new set of accounts uploaded through CSV for the user.

3. Click Upload and Preview.

4. In Upload Account Preview page that displays, do one of the following:

   • Click Import From Job to start the import process using the SchemaAccountJob.
     Ensure that both CSV and SAV files are available before performing the import operation.

   • Click Import Now to start the import process immediately.
     If you have selected First row as heading as No, manually map the account file fields to the database accounts table fields and click Import Now.

   • If the upload is successful, the uploaded record details are populated in Upload Accounts Detail page under the following columns: Entitlement Values Inserted, Account Entitlement Mappings Inserted, Total Import Time in milliseconds, User Account Mappings Updated, Total Owners Updated, Accounts Deleted, Total Owners Added, User Account Mappings Inserted, Security Systems Inserted, Unsaved Accounts, Account Entitlement MappingsDeleted, Existing Users, Endpoints Inserted, Entitlement Types Inserted, total skipped duplicate entries, Total Record In File and Accounts Inserted.

5. Go to Admin > Identity Repository > Accounts to view the account details you uploaded using CSV file.