AD Source and User Search Scope

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,
For an AD source, I’ve narrowed the scope down after the initial aggregation of accounts. Unfortunately, I’ve got 1000’s of accounts that are not required but I cannot remove because the number is greater than the maximum that I can set the deletion threshold to (20%).
Basically, I only want less than 50 of the 4000+ that have been pulled in.
Any suggestions on how to remove all the now redundant users ?

Many thanks
Phil

EDIT: Same goes with Entitlements. Just aggregated the source, and its pulled in the correct 10, but I am still left with the unwanted 1000+

2

Hi @phil_awlings,

Even though the threshold dropdown has only values up to 20%, you can manually enter the required value above 20%.

For the entitlement removal, I believe you would need to do a source entitlement reset and then do an aggregation to remove the unwanted ones.

3

Hi @jesvin90
Thanks for that.
For anyone else looking to resolve this issue:

Managing Sources Overview - SailPoint Identity Services

This will delete ALL users:
POST https://.api.identitynow.com/beta/sources/<:id>/remove-accounts

This will delete ALL entitlements:
POST https://.api.identitynow.com/beta/entitlements/reset/sources/<:id>

4

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.