This is a basic question regarding IG&L.
Can somebody please explain the difference between the Accounts Tab under
Application > Accounts
and
Application > Collector > Accounts.
Example:
Which account is represented in any workflow representing the app?
Thank you
An example: If you have set a directory for accounts on the application's general tab you even don't have to collect any account in the collector and you will see all the accounts of the directory.
So one does not need to collect Application accounts if you associate Directory Accounts and map entitlements to the Directory accounts?
That's right. In case of eg. AD it is even not recommended. AD accounts do not belong to the applications, they belong to AD. If you want to add group membership in a new application you have to decide if creating new account based on whole AD not only the application.
The accounts shown under the Application is summation of all the accounts collected from one or more collectors for the application while the accounts under ADC only shown accounts collected by it.