We are planning to use Scheduled search subscriptions for getting alerts on a regular basis. However, we use only timed temporary Admin access to SailPoint IDN for all the administrators. As a result, the scheduled search subscription gets disabled when the admin access of the creator/owner of the search is removed.
Has anyone come across such a scenario and can suggest the best practise to keep the scheduled search running despite revocation of admin access?
PS: Use of a shared account to login to SailPoint is not allowed.
Thanks for the reply.
Won’t the PAT expire if the “Admin” user level is removed?
I understand that the scheduled searches are linked to the context of the creating user and in case the user does not have Admin access, the status changes to disabled.
Scheduled search stop working if the creator loses admin access. To avoid this, create a dedicated service identity with permanent admin rights. Use that to create and manage searches
Maybe you should consider assigning the permanent Report Admin access to your admins so that the scheduled searches can be maintained and then use the time based access for the Admin level access.