We are planning to create 2 different service accounts, one normal service account which we can use in Domain settings to configure Active Directory source in SailPoint IDN another gMSA account to use as the IQService LogOn and we want to enable TLS at all the setting pages in AD configuration. Can we use gMSA account in IQService setting page or do we need to have another account which is domain user for configuration?
Hi Priyanka,
Please check this link Required Permissions and see whether this helps you to make the decision.