I need to schedule a certification for the criteria manager should review for the privileged accounts in AD which are from different OU

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

I need to schedule a certification for the criteria manager should review for the privileged accounts in AD which are from different OU. We have few limitations here,

  1. actually if we aggregate these accounts which doesn’t have a correlation logic match then become an uncorrelated account.
  2. if we do an uncorrelated accounts Cert we have only limitation to source owner not manager.
  3. If we go with manager cert it is not picking the AD uncorrelated accounts but only selecting the identities.

So struck here, Help would be appreciated.

Thanks,

Issak Chevuri

2

Yeah this isn’t possible out of the box in ISC.

Uncorrelated account certifications only go to the Source Owner, not the manager. And manager certs only work for correlated identities.

Also, for uncorrelated accounts there’s no manager linked, and you can’t really use account attributes directly for certification — because the certifier has to be tied to an identity, which doesn’t exist in this case.