Is there a way to assign the accounts directly to the reviewers (like a coverage file) and not to the users (since most of the service accounts do not have any users associated) during the account collection (some thing like "Import Account Mapping" - but assigned to reviewers directly) ?
Or
Is there a table that can be updated to map accounts to reviewers so that the accounts are resolved (do not appear in orphans tab) during collection and unification?
Hi Diane,
Thank you for the response. We have a lot of orphan accounts across different domains, which are service accounts, and they are to be reviewed by few set of reviewers. I have mapped these accounts via coverage file - mapped these service accounts to reviewers via coverage file for our review purpose. However, we have strict monitoring/reporting of orphan accounts and we cannot have x% of orphans at any given point. So since we know who the service accounts owners are, we would like to see the accounts under "Active" accounts, but we do not want to assign these accounts to owners via "Import Account Mappings" as it would assign these accounts to the mapped user's supervisor for review. I hope I am making sense and am able to elaborate my issue .
Or, when I generate a report of total accounts vs accounts that have a mapping (query the T_AV_ACCOUNTS and T_AV_USER_ACCOUNT_MAPPINGS) , I should be able to have the service accounts included in "linked" or "Mapped" or "Active" accounts and not Orphans.
OR
Is there a table that can hold account vs reviewer mapping without generating a review with a coverage file.
OR
A table similar to T_AV_REVIEW_COVERAGE but with a direct mapping of service accounts to reviewers irrespective of a review generation (Eg. T_AV_ACCOUNTS.ID to a reviewer/owner)
Hi Patil,
That would make the reviewers the account owners. You could manually map accounts to reviewers (since they are users) or modify the ADC to collect reviewers as the users of the accounts but either way that makes the reviewers the account owners. Could you please provide a specific use case example and more information on how you would like to see this work? For example, would you expect the account to be orphaned again after the reviewer reviews the account access or would you expect the reviewer to always be the account owner? Would you want the system to differentiate between account owners and reviewer owners and how do you see that working? Who would review the reviewer's access to the account? Would non-orphan accounts also get assigned to their relevant reviewer thus having two owners? How do you see ACM determining which users are the reviewers?
Thanks, Diane