Click HERE to see how Saviynt Intelligence is transforming the industry. |
09/24/2024 02:40 AM
Hi Team,
We have to provision AD-ABC new accounts to user if user is having AD-DEF account so we tried using
at.userkey IN
(
SELECT u1.userkey
FROM users u1
JOIN user_accounts ua
ON ua.userkey = u1.userkey
JOIN accounts a
ON a.accountkey = ua.accountkey
WHERE a.endpointkey IN
(
SELECT endpointkey
FROM endpoints
WHERE endpointkey IN (105) and TASKTYPE in (1 ))
here endpointkey - 105 is AD-DEF, but the issue is if there is any other account pending task like exchange account even that is getting picked. can anyone suggest how to solve this
Thanks,
Srinivas N
Solved! Go to Solution.
09/24/2024 02:50 AM
Hi @Srinivas_N creare a seperate prov job for AD-ABC security system
09/24/2024 03:04 AM
Hi @NM ,
This is the new job which checks if user is having AD-DEF account, actual requirement is this should provision only AD-ABC but it was picking exchange account also so we need to avoid picking exchange
09/24/2024 03:13 AM
@Srinivas_N is exchange online part of same security system?
Can you share job config?
09/24/2024 10:19 AM
Did you validated query from data analyzer first ?
09/24/2024 10:43 PM
Hi, tried the below query and its working
and (at.endpoint in(177)) and
at.userkey IN
(
SELECT u1.userkey
FROM users u1
JOIN user_accounts ua
ON ua.userkey = u1.userkey
JOIN accounts a
ON a.accountkey = ua.accountkey
WHERE a.endpointkey IN
(
SELECT endpointkey
FROM endpoints
WHERE endpointkey IN (105) and TASKTYPE in (1,3 )))
here 177 is endpointkey for exchange account and 105 is for AD-DEF