We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

We observed that the tasks are creating for "Manually Suspended" accounts. Is this expected?

srinath
Regular Contributor
Regular Contributor

We have application endpoint which makes the account for the endpoint to "Manually Suspended" state whenever goes for Disabling user. but We observed that the tasks are creating for "Manually Suspended" accounts. Is this expected?

23 REPLIES 23

rushikeshvartak
All-Star
All-Star

No its not expected behaviour


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

srinath
Regular Contributor
Regular Contributor

Hi @rushikeshvartak ,

Then what could be the issue why suspended accounts are triggering task, do there any configuration issue?

There is no configuration. But can you share logs when tasks are created and what is source of task ?


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Hi @rushikeshvartak ,

Let's take example if i am updating the user attribute and the update rule is triggering for manually suspended account. See attached logs around 19:00 hr. and also find the screenshot of the task triggered.

srinath_0-1688497791624.png

deletion tag is appending i think we have account name rule mapped to CP1 value

Did recon ran same time


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

@rushikeshvartak There is no import job for this API.

Is this happening for all apps ? can you share security system config 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

@rushikeshvartak I am not sure about other application mostly No, but this is happening for this app. Here is the screenshot for security system for the app

 

Try raising request from ARS for manually suspended account and find if tasks getting created or not


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Looking at logs , it seems that system first created Disable Account task, can you check if any disable account task was completed and processed before the Update account task?

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

srinath
Regular Contributor
Regular Contributor

Hi @dgandhi ,

We disabled the account and account went into suspended state successfully. But we observed  when we make user active and the manually suspended account also getting trigger task for any action like update any attribute. Generally it should not

Please open FD TICKET FOR SAME


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

Can you please check what is the config for below in Global Configurations?

dgandhi_0-1688563402737.png

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

srinath
Regular Contributor
Regular Contributor

Hi @dgandhi ,

 

Here is the screenshot for the reference

srinath_0-1688565734473.png

 

If the update account task are created from the rule then disable above config as this config will create update account tasks for inactive accounts present in the system,

 

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

srinath
Regular Contributor
Regular Contributor

But the account is not inactive right the status is "Manually Suspend"

Manually Suspended is the status which Saviynt sets, when you do the recon , status will be Inactive.

Please disable the above mentioned configuration and retest the scenario.

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

srinath
Regular Contributor
Regular Contributor

@dgandhi @sk can i know what is the recommended option for update account in global configuration?

It depends on your business requirement.

 

Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

It depends on your other applications use cases, If any other application where you still want to trigger update account task for disabled users then you should uncheck it. So it totally depends on your requirement


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.

How are these update account tasks are getting generated, Is it through rules?


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.

srinath
Regular Contributor
Regular Contributor

Hi @sk ,

Yes, through Rules only and rule will verify user is active then only create update account account. But generally the task should not create for "Manually suspended accounts" 

Then uncheck below setting in global configuration (Rules -> Include Inactive User and Accounts in Update Account Rulesas shown in screenshot and it should work as expected. Because in Saviynt status will be Manually Suspended for disabled account until you recon from target. But in your case application is disconnected and status will Manually Suspended only for disabled accounts. 

sk_0-1688572670950.png

 


Regards,
Saathvik
If this reply answered your question, please Accept As Solution and give Kudos to help others facing similar issue.