# \#privileged-task-automation **URL:** https://developer.sailpoint.com/discuss/tag/privileged-task-automation/841.md [Latest](https://developer.sailpoint.com/discuss/latest.md) · [Categories](https://developer.sailpoint.com/discuss/categories.md) · [Tags](https://developer.sailpoint.com/discuss/tags.md) --- ## [Improving privilege posture in Identity Security Cloud](https://developer.sailpoint.com/discuss/t/improving-privilege-posture-in-identity-security-cloud/217758)
**Author:** [@darylclaude\_medina](https://developer.sailpoint.com/discuss/u/darylclaude_medina)\ **Replies:** 1\ **Last updated:** [August 3, 2026, 3:19pm UTC](https://developer.sailpoint.com/discuss/t/improving-privilege-posture-in-identity-security-cloud/217758 "2026-08-03T15:19:03Z")
Privileged access is everywhere. Many organizations don’t have holistic visibility into where privilege-related risks exist within their infrastructure, and Privileged Access Management (PAM) solutions address only a por… --- ## [PTA Get or Search AD User](https://developer.sailpoint.com/discuss/t/pta-get-or-search-ad-user/211668)
**Author:** [@kyle\_knox](https://developer.sailpoint.com/discuss/u/kyle_knox)\ **Replies:** 9\ **Last updated:** [July 6, 2026, 4:09pm UTC](https://developer.sailpoint.com/discuss/t/pta-get-or-search-ad-user/211668 "2026-07-06T16:09:23Z")
I have a question for a unique use case using the Privilege Task Automation & Get or Search AD User. We have a requirement to occasionally look up users in a separate Active Directory domain from our primary one. We do n… --- ## [Using PTA without local admin permissions](https://developer.sailpoint.com/discuss/t/using-pta-without-local-admin-permissions/214618)
**Author:** [@kcberg](https://developer.sailpoint.com/discuss/u/kcberg)\ **Replies:** 4\ **Last updated:** [June 24, 2026, 7:50pm UTC](https://developer.sailpoint.com/discuss/t/using-pta-without-local-admin-permissions/214618 "2026-06-24T19:50:49Z")
We are trying to get windows server actions set up without giving the associated service account local admin over the server. Everything works fine when the service account is a local admin. When it isn’t, we get wsman f… --- ## [PTA Workflow Script Unable to Query Active Directory](https://developer.sailpoint.com/discuss/t/pta-workflow-script-unable-to-query-active-directory/209339)
**Author:** [@rg60115](https://developer.sailpoint.com/discuss/u/rg60115)\ **Replies:** 2\ **Last updated:** [June 21, 2026, 7:46pm UTC](https://developer.sailpoint.com/discuss/t/pta-workflow-script-unable-to-query-active-directory/209339 "2026-06-21T19:46:13Z")
I’m building a workflow that uses PTA to execute PowerShell scripts on a Windows server as a service account. The workflow triggers on idn:account-created and calls a PowerShell script to generate a unique UPN/email alia… --- ## [PTA - Not able to delete a group from Active Directory](https://developer.sailpoint.com/discuss/t/pta-not-able-to-delete-a-group-from-active-directory/214136)
**Author:** [@luckyn](https://developer.sailpoint.com/discuss/u/luckyn)\ **Replies:** 6\ **Last updated:** [June 20, 2026, 5:09pm UTC](https://developer.sailpoint.com/discuss/t/pta-not-able-to-delete-a-group-from-active-directory/214136 "2026-06-20T17:09:53Z")
Hi Sailors, I am trying to delete a AD group using PTA Action, but it fails with the following error. {"error":{"detailCode":"500.0 Unhandled Plugin Error","message":{"locale":"en-US","localeOrigin":"DEFAULT","text":"L… --- ## [ISC Workflow - PTA - Launch PowerShell Script](https://developer.sailpoint.com/discuss/t/isc-workflow-pta-launch-powershell-script/138817)
**Author:** [@questjj](https://developer.sailpoint.com/discuss/u/questjj)\ **Replies:** 6\ **Last updated:** [June 17, 2026, 8:02pm UTC](https://developer.sailpoint.com/discuss/t/isc-workflow-pta-launch-powershell-script/138817 "2026-06-17T20:02:01Z")
Idea - Launch an on-prem powershell script using Workflow PTA and Credential Provider. Something that would mimic: PsExec.exe \\192.168.1.10 -u admin -p P@ssw0rd c:\\scripts\\dailyLongLoopJob.ps1 PTA is a great start, wh… --- ## [Windows Server workflow action to run powershell script](https://developer.sailpoint.com/discuss/t/windows-server-workflow-action-to-run-powershell-script/195768)
**Author:** [@mpotti](https://developer.sailpoint.com/discuss/u/mpotti)\ **Replies:** 5\ **Last updated:** [March 23, 2026, 12:27pm UTC](https://developer.sailpoint.com/discuss/t/windows-server-workflow-action-to-run-powershell-script/195768 "2026-03-23T12:27:15Z")
I have been asked to automate our process for off boarding. I have a workflow that is doing each our manual steps. I have a requirement to update the description on the users AD account. When I get to this point I am get… --- ## [Workflow - PTA - Update DN on Cube when account moved](https://developer.sailpoint.com/discuss/t/workflow-pta-update-dn-on-cube-when-account-moved/188287)
**Author:** [@mpotti](https://developer.sailpoint.com/discuss/u/mpotti)\ **Replies:** 2\ **Last updated:** [November 17, 2025, 8:07am UTC](https://developer.sailpoint.com/discuss/t/workflow-pta-update-dn-on-cube-when-account-moved/188287 "2025-11-17T08:07:56Z")
Hello Everyone, I have been tasked with creating a workflow to move users OU when the attribute standardOu changed. I have the workflow built out and am able to successfully move the AD account. The new challenge I am r… --- ## [Privileged task automation - modify group name related attributes](https://developer.sailpoint.com/discuss/t/privileged-task-automation-modify-group-name-related-attributes/187734)
**Author:** [@nmuzinic](https://developer.sailpoint.com/discuss/u/nmuzinic)\ **Replies:** 0\ **Last updated:** [November 7, 2025, 3:11pm UTC](https://developer.sailpoint.com/discuss/t/privileged-task-automation-modify-group-name-related-attributes/187734 "2025-11-07T15:11:54Z")
Hi everyone, We are using PTA in workflows to manage AD groups and facing issue when updating group name related attributes, the cn attribute to be precise. We’re able to update the accountName and displayName without a… --- ## [How to do paging for PAM module connector in SailPoint IIQ](https://developer.sailpoint.com/discuss/t/how-to-do-paging-for-pam-module-connector-in-sailpoint-iiq/177656)
**Author:** [@SamSH](https://developer.sailpoint.com/discuss/u/SamSH)\ **Replies:** 3\ **Last updated:** [October 15, 2025, 6:26am UTC](https://developer.sailpoint.com/discuss/t/how-to-do-paging-for-pam-module-connector-in-sailpoint-iiq/177656 "2025-10-15T06:26:30Z")
Which IIQ version are you inquiring about? 8.4 Share all details about your problem, including any error messages you may have received. Hi @everyone, I am trying to integrate my CyberArk application with SailPoint IIQ … --- ## [SailPoint VA Privileged Cluster – VA Stuck in Draft State After Re-Pairing](https://developer.sailpoint.com/discuss/t/sailpoint-va-privileged-cluster-va-stuck-in-draft-state-after-re-pairing/156922)
**Author:** [@krunal\_sshah](https://developer.sailpoint.com/discuss/u/krunal_sshah)\ **Replies:** 6\ **Last updated:** [August 12, 2025, 7:39am UTC](https://developer.sailpoint.com/discuss/t/sailpoint-va-privileged-cluster-va-stuck-in-draft-state-after-re-pairing/156922 "2025-08-12T07:39:07Z")
Hello everyone, We’re encountering an issue while deploying a SailPoint VA (Virtual Appliance) in a privileged cluster setup and are seeking advice or suggestions from anyone who has faced a similar situation. Backgrou… --- ## [Issue with privileged task automation workflow](https://developer.sailpoint.com/discuss/t/issue-with-privileged-task-automation-workflow/99303)
**Author:** [@svenkitachalam](https://developer.sailpoint.com/discuss/u/svenkitachalam)\ **Replies:** 14\ **Last updated:** [June 27, 2025, 3:29pm UTC](https://developer.sailpoint.com/discuss/t/issue-with-privileged-task-automation-workflow/99303 "2025-06-27T15:29:58Z")
Hi all, I am trying to set up privileged task workflow and testing out using the get user by samaccountname AD task. I am getting the following error when I test it. {“error”:{“detailCode”:“403 Authorization Failed”,“m… --- ## [PAG Stage Fails in Privilege Task Automation Workflow – “Bind failed. LDAPS server az3.wxyz.com:636 is down”](https://developer.sailpoint.com/discuss/t/pag-stage-fails-in-privilege-task-automation-workflow-bind-failed-ldaps-server-az3-wxyz-com-636-is-down/148749)
**Author:** [@Vatanjain11](https://developer.sailpoint.com/discuss/u/Vatanjain11)\ **Replies:** 1\ **Last updated:** [June 27, 2025, 3:28pm UTC](https://developer.sailpoint.com/discuss/t/pag-stage-fails-in-privilege-task-automation-workflow-bind-failed-ldaps-server-az3-wxyz-com-636-is-down/148749 "2025-06-27T15:28:19Z")
Hi Developers 1 Overview We’re automating Privileged Access in IdentityNow (IDN) and the workflow consistently fails at Stage 4 – Privilege Automation Gateway (PAG), which retrieves OU data from Active Directory (AD). … --- ## [Clarification on Using AWS Credential Provider for Azure VA in Privileged Task Automation Workflow](https://developer.sailpoint.com/discuss/t/clarification-on-using-aws-credential-provider-for-azure-va-in-privileged-task-automation-workflow/147647)
**Author:** [@Vatanjain11](https://developer.sailpoint.com/discuss/u/Vatanjain11)\ **Replies:** 0\ **Last updated:** [June 23, 2025, 6:24pm UTC](https://developer.sailpoint.com/discuss/t/clarification-on-using-aws-credential-provider-for-azure-va-in-privileged-task-automation-workflow/147647 "2025-06-23T18:24:34Z")
Hello Developers, We are currently implementing a Privileged Task Automation (PTA) workflow to create Active Directory (AD) groups. As part of this setup, we are utilizing an Azure Virtual Appliance (VA) for executing t… --- ## [Privileged task automation workflow errors](https://developer.sailpoint.com/discuss/t/privileged-task-automation-workflow-errors/141472)
**Author:** [@naluvala](https://developer.sailpoint.com/discuss/u/naluvala)\ **Replies:** 4\ **Last updated:** [June 16, 2025, 12:32pm UTC](https://developer.sailpoint.com/discuss/t/privileged-task-automation-workflow-errors/141472 "2025-06-16T12:32:49Z")
Hi All, I am using hashicorp(on prem) as a credential provider in sailpoint ISC. I dont have ssl enabled so i am using the port as 389 instead of 636 in PTA Create AD groups workflow. From the json script i have also ad… --- ## [PTA Create AD group](https://developer.sailpoint.com/discuss/t/pta-create-ad-group/141102)
**Author:** [@sdhulipala003](https://developer.sailpoint.com/discuss/u/sdhulipala003)\ **Replies:** 1\ **Last updated:** [June 5, 2025, 10:16am UTC](https://developer.sailpoint.com/discuss/t/pta-create-ad-group/141102 "2025-06-05T10:16:48Z")
Hello We are trying to use PTA to trigger automated AD group creation using the sample SailPoint template ( Privileged Task Automation). The workflow has no validation errors. But after we fill out the form, the workflo… --- ## [Groups Created from PTAs Should Be Immediately Available as Entitlements](https://developer.sailpoint.com/discuss/t/groups-created-from-ptas-should-be-immediately-available-as-entitlements/105521)
**Author:** [@adunker](https://developer.sailpoint.com/discuss/u/adunker)\ **Replies:** 0\ **Last updated:** [March 26, 2025, 9:55pm UTC](https://developer.sailpoint.com/discuss/t/groups-created-from-ptas-should-be-immediately-available-as-entitlements/105521 "2025-03-26T21:55:33Z")
Link to vote for idea: Groups Created from PTAs Should Be | SailPoint Ideas Portal I would love to hear if people have other approaches or how they’re using this today! IDEA: SailPoint should optimistically create an … --- ## [Using AWS Secrets Manager for Active Directory privileged task automation in ISC Workflows](https://developer.sailpoint.com/discuss/t/using-aws-secrets-manager-for-active-directory-privileged-task-automation-in-isc-workflows/101071)
**Author:** [@surjithsudhakaran](https://developer.sailpoint.com/discuss/u/surjithsudhakaran)\ **Replies:** 4\ **Last updated:** [February 25, 2025, 7:13pm UTC](https://developer.sailpoint.com/discuss/t/using-aws-secrets-manager-for-active-directory-privileged-task-automation-in-isc-workflows/101071 "2025-02-25T19:13:18Z")
I am trying to build a simple workflow in ISC using the Active Directory privileged task automation action to execute commands in Active Directory. One prerequisite for using the privileged task automation action is to c… --- ## [Interactive form - get select field to only include direct reports](https://developer.sailpoint.com/discuss/t/interactive-form-get-select-field-to-only-include-direct-reports/89297)
**Author:** [@jewalker](https://developer.sailpoint.com/discuss/u/jewalker)\ **Replies:** 3\ **Last updated:** [December 9, 2024, 9:55pm UTC](https://developer.sailpoint.com/discuss/t/interactive-form-get-select-field-to-only-include-direct-reports/89297 "2024-12-09T21:55:49Z")
Hello community! I am working with new features available in workflows from privileged task automation. Problem to solve: My organization doesn’t not provide a way via the HR system to process an immediate/emergency t…