User Account correlation rule

[Karl]

I want correlation using account's accounttype

If I apply it like #accounts.name like 'svc-' AND users.username = '####', but I want use accounttype.
but it doesn't apply even if I use all three methods as below
1. #accounts.ACCOUNTTYPE like 'SERVICE' AND users.username = '####'
2. #accounts.accounttype like 'SERVICE' AND users.username = '####'
3. #accounts.accountType like 'SERVICE' AND users.username = '####'

How can I apply accounttype well to correlation rule?

[rushikeshvartak]

What is your requirement ? In case you don't want to map user to account when account type is Service then use below 

CASE 
    WHEN accounts.accounttype LIKE 'SERVICE%' THEN ''
    ELSE users.username
END = accounts.name

[Karl]

Was my explanation insufficient?
I would like to correlate by accounttype in endpoint's User Account Correlation Rule.

I did it like the example below, but it doesn't seem to work.
accounts.accounttype like 'SERVICE' AND users.username = '####'

[NM]

Hi @Karl , users profile is to which we you will map the account.

Are you trying to check username as well?

If so then add in right side

Eg 

Accounts.accounttype=case when users.username='ttt' then users.username else '' end

[rushikeshvartak]

• Still its unclear 
• If account is service account then it will be always orphan ?
• Do you want to map account to user ?-- > This is not correct approch 
• Do you want to update account type for account ? --> if yes then it needs to be done in import config or one time import using csv