Hi all,

We're setting up a lab with RSA Governance & Lifecycle 8.0.0 P06 (build 186993) and have a question about service accounts.

We have a technical Active Directory account, svc_rsa_collect, that is already being collected without issues by our AD account collector. It currently shows as orphaned, with "Is Service Account" set to "No". We'd like to change that to "Yes" without recreating the account and without mapping it to a user, since it doesn't belong to any person.

We've gone through the account options, the collector attribute mapping, the account attributes under Admin > Attributes and the available Web Services commands, but couldn't find a documented way to change this field on an existing account. The only place where we can edit it is the Account Template, which, according to the Administrator's Guide, is used when new accounts are created.

Our questions:

1. Is there an officially supported way to mark an already collected account as a service account?

2. If so, is it done through the UI, a Web Services command or some other configuration, such as the collector mapping?

3. Does it depend on the ARM (Access Request Manager) module or any other component? ARM is disabled in our environment and provisioning is manual.

4. Once the account is marked as a service account, does it stop showing as orphaned? And will the value be kept on later collections?

We'd rather not make any direct changes to the database. If there's no supported way to do this today, a recommended alternative would already help a lot.

Thanks in advance!