We have application collectors are CSV based and pretty tedious to clean up when a user is terminated.
Is it possible to use DOS commands in a workflow to add/remove accounts?
Has anybody created a Powershell script to do the same?
Thank you
Shlomo
We have application collectors are CSV based and pretty tedious to clean up when a user is terminated.
Is it possible to use DOS commands in a workflow to add/remove accounts?
Has anybody created a Powershell script to do the same?
Thank you
Shlomo
Can you describe in more detail?
Usually csv is an export from a target system.
What is the point of modifying the csv if the next time the target system will provide an export all the local changes will be modified?
Or you are using the csv as an input to the target system?
Hello
In order to create the collection data, we need to manually export the information from application.
Example: Web portals we cannot connect to.
I then place the CSV in a location G&L can collect from.
When a user is terminated, as an example, we have a manual task to disable the account in the web portal and manually remove the user entry from the CSV so the change can close.
I do not want to refresh the export every time, so I was hoping to automate the CSV cleanup.
I don't think that is a good idea. The spirit of verification process is to ensure that the access was actually removed from the source and this is done by the next CSV drop/collection. If you are editing the CSV (by some means) it defeats the purpose.
I agree with Pradeep, however if you do want to what you want to do you should use "local entitlements" by means of a local entitlement collector. This can handle the process you are looking for without having to edit a CSV file.
regards
Edwin
Thank you, that makes sense.
Is there a way to convert an existing collector into a Local so not to lose the existing entitlements?
If not, will I need to create a new collector and point it to the information already collected in the G&L database?
Is there a document for this type of action?
Thank you
Not to my knowledge, you can however export the existing entitlements into a csv and use that to create these as local entitlements. Only thing you need to do is the user to entitlement relationship
Edwin
Thank you - I am looking for the Data Source Local , but it is not listed.
Make sure you don’t have any other entitlement collectors defined for that application. If you have then it will not show up
Edwin
I agree with Pradeep, however if you do want to what you want to do you should use "local entitlements" by means of a local entitlement collector. This can handle the process you are looking for without having to edit a CSV file.
regards
Edwin