How to get report of "Modify account failed" and also is there a way to notify?

Identity Security Cloud (ISC) ISC Discussion and Questions
1

We know that for identities events we can have “Modify account failed”

  1. How to get report all at once of those events
  2. Any way to notify when “Modify account failed”
2

You can use this search query to get REPORT of “Modify account failed” events
operation:MODIFY AND status:FAILED

you can save this search and create a subscription to get the reports in inbox

2 Likes
3

@shaffusailpoint

You can create a workflow and trigger based on Account Provisioning completed and filter it for failed Modify operation.

Further, you can send email notification whenever there is an modify account activity failed.

Thanks,
Nikhlesh

4

Please let us know little bit elaborate one like sequence of flow

5

You can get a report of “Modify Account Failed” events using Search → Identity Activity and filter by that event type. Save the search and set up a scheduled subscription to email reports regularly. For real-time alerts, create a workflow triggered by account-modify.failed. In the workflow, add a Send Email step to notify admins with failure details. This setup ensures you’re both alerted and can track failures over time.

6

@shaffusailpoint

image
image527×370 16.4 KB

This the flow you need to follow. In Provisioning Completed Trigger add filter for Failed Modify operation like below.

$.accountRequests[?(@.provisioningResult == 'failed' && @.accountOperation == 'Modify')]

Thanks,
Nikhlesh

1 Like
7

for sure let us try this. thank you!