Unable to remove all accounts from a source

[rk_cyd (Ranjith Kumar)]

Hello, I am trying to reset the accounts and entitlements from an Azure AD source. I was able to remove all the entitlements from the source successfully but when I tried to execute the API /sources/:id/remove-accounts, I am getting the below error

“Source Owners account exists on source”.

I ensured that the owner name listed for the source doesn’t have an account in the Azure AD source. How do I remove all the accounts from the Azure AD source ?

BTW, I also tried it through the VSCode extension but the extension is also giving an error when I try to reset the source or accounts. It only works for entitlements.

Thanks

RK

[kalyan_dev32 (Pavankalyan Dosa)]

Hey @rk_cyd ,

This error happens when any identity that owns any source in the tenant also has an account on the source you are trying to reset. It is a platform restriction. See prior discussion confirming the behavior and two workarounds

Remove Source Accounts API: Can't remove if any Source Owner has an account

I have to change the Account ID for the Account Schema of a source in development that has already had accounts aggregated into it. Based on the warning, my plan was to use the Remove Source Accounts endpoint to remove all accounts, then modify the schema to be correct, then re-aggregate the accounts. The documentation for the endpoint is here: delete-accounts-async | SailPoint Developer Community When I run this, adding the ID of the source, I am getting the following error: [Screenshot 202…

Run this query to find all identities who own one or more sources:

_exists_:owns.sources

thanks

[selvasanthosh (Selvasanthosh M)]

Hi @rk_cyd ,

You have to remove the source owner’s account from the source.

Go to accounts and remove the source owner account from the accounts.

You can do the Reset Accounts easily in Vs code ISC extention.

[rk_cyd (Ranjith Kumar)]

Thank you. This trick worked.

I executed the API call /sources/:id/remove-accounts. The error message showed a bunch of IDs. I took each of these IDs and searched for the identities. For each identity, I removed the account from the source I wanted to reset. That did the trick.