It is possible to list accounts that are active in some source, but without a profile

Identity Security Cloud (ISC) ISC Discussion and Questions
1

It is possible to list accounts that are active in some source, but without a profile.

I used this query without success

image
image1621×696 19.2 KB

2

Try

@accounts(source.name.exact:"Neurotech API - BR V2") AND NOT @access(source.name.exact:"Neurotech API - BR V2")

That should show people who have an account in a source but no access

1 Like
3

Is it possible to create a routine to deactivate these accounts?

4

I don’t have workflows in my tenant but I would imagine you could create a scheduled workflow to run that search, and for each identity returned, run a disable-account API call

5

Hi,

As mentioned by Mark, you could use the Workflows module to achieve this.

Have a scheduled trigger run when you want to execute the workflow, e.g. daily at 1:00AM.

You can then get a list of Identities via the search query & input them into a loop which then gets each identities accounts & disables them. the workflow then ends once the loop is finished iterating through the identities(capped at 250).

I’ve attached a template workflow as a starter for better understanding - hope this helps.

Disablefromsearchquery.json (437 Bytes)

1 Like
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.