Best practices to clean up bad/unwanted data with respect to identities and accounts

[shamal_khokle]

IIQ Version - 8.3
Hello Experts,

We are looking for best practices to clean up bad/unwanted data with respect to identities and accounts (user account links) from SailPoint environments (lower and PROD as well). We would like to hear from you about the best way to handle this.

• What are the options or things that are must to be checked before proceeding with any action? (Prechecks for data)
• Ways to delete the unwanted identities and accounts
  • E.g., terminator API to delete identities

Thanks

[enistri_devo (Emanuele Nistri)]

Hi @shamal_khokle,

you have 2 principal tools for clean up: Prune Identity and Performance Maintaince Tasks.
The first, delete all the empies identities; the second have some flag:

where you can set the number of day to maintance those object before deletion. You can configure the day in Global Setting → Identity Configuration → Miscellaneuos:

But the best way is make an analisys for each application and dont aggrergation the unusefull object.