# Machine accounts certification **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** machine-identity-security, machine-accounts, certifications, identity-security-cloud\ **Created:** [September 7, 2026, 1:13pm UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706 "2026-09-07T13:13:03Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![fatimahm](https://avatars.discourse-cdn.com/v4/letter/f/3d9bf3/32.png) [@fatimahm](https://developer.sailpoint.com/discuss/u/fatimahm)\ **Post date:** [September 7, 2026, 1:13pm UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706/1 "2026-09-07T13:13:03Z")
Hi all, We’ve set up a certification campaign scoped to Machine Accounts on a source, with “Account Owner” as the reviewer type. Several machine accounts have a valid `ownerIdentity` assigned, are enabled, and have entitlements, but they’re not showing up in the generated campaign. Only a couple of accounts with no owner at all got included, and were routed to the default/fallback reviewer. For info, the excluded accounts were created via the [create-machine-account-request-v1](https://developer.sailpoint.com/docs/api/create-machine-account-request-v-1) endpoint, and have been aggregated and existing for several days no, so this isn’t a timing/indexing issue. Has anyone run into this before? Any idea what could cause accounts with a valid owner to be excluded from an Account Owner campaign? Thanks! ---
**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\ **Post date:** [September 7, 2026, 3:34pm UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706/2 "2026-09-07T15:34:57Z")
Hello Fatima. This does not look like expected behavior. In a Machine Accounts campaign, the accounts are selected from the source before the reviewer is configured. SailPoint also documents that if an account owner is not configured, the review falls back to the Source Owner, so a valid owner should not exclude the account. I would generate another preview with the same source and campaign filter, but use `Individual` as the reviewer. - If the missing accounts appear, the issue is specific to the Account Owner reviewer path. - If they are still missing, confirm they appear under Machine Accounts for that source and check whether the campaign filter is excluding their access. Also verify the owner on the current machine account after aggregation, not only the `ownerIdentityId` submitted during creation, since classification and mappings are reprocessed during aggregation and can change the mapped values. If the accounts only disappear with `Account Owner`, I would raise it with SailPoint Support and mention that they were created through the experimental `create-machine-account-request-v1` API ---
**Author:** ![fatimahm](https://avatars.discourse-cdn.com/v4/letter/f/3d9bf3/32.png) [@fatimahm](https://developer.sailpoint.com/discuss/u/fatimahm)\ **Post date:** [September 8, 2026, 6:30am UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706/3 "2026-09-08T06:30:50Z")
Hello Harish, Thank you for your feedback. Indeed, I have already raised the issue with SP Support. When selecting “Machine Accounts,” the reviewer can only be either the Account Owner or the Access Owner. “Individual” Reviewer is not available in the list. The machine account owner corresponds to `ownerIdentityId`, even after a complete aggregation. ---
**Author:** ![Deepak\_Chaudhary](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/deepak_chaudhary/32/34380_2.png) [@Deepak\_Chaudhary](https://developer.sailpoint.com/discuss/u/Deepak_Chaudhary)\ **Post date:** [September 8, 2026, 7:26am UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706/4 "2026-09-08T07:26:01Z")
Hi Fatima, Are you seeing any error or warnings in the campaign generation? This looks known issue and you need to check how NERM/Machine aggregation handled by SailPoint. you can verify the `ownerIdentity` with GET method v3 api. Second you can check the `correlation` of that identity. ---
**Author:** ![fatimahm](https://avatars.discourse-cdn.com/v4/letter/f/3d9bf3/32.png) [@fatimahm](https://developer.sailpoint.com/discuss/u/fatimahm)\ **Post date:** [September 8, 2026, 7:59am UTC](https://developer.sailpoint.com/discuss/t/machine-accounts-certification/221706/5 "2026-09-08T07:59:47Z")
Hi Deepak, I’m not seeing any errors. Campaigns are generated for machine accounts without an owner, the source owner is assigned instead. When a campaign is created using a filter that excludes accounts without an owner, it is generated with a “Complete” status. Thanks,