In object changed History of ADSAccount ,what is the difference changed by "sa" and changed by "synchronization"

Question

while i taking the a user ADSAccount history ,i could see that there are two option for " changed by ".I could see two option like " sa " and " Synchronization ".What is actually meant by this. 
 If any object modified " Synchronization " ,does it means that that modification is coming form Target completely.Can we say like that. 
 What is the difference between this. 
 Please Help me..

Markus Weiss-Ehlers · Accepted Answer

The Sync Engine from OneIM has changed a property you will see the user Synchronization as the originator of the change. This happened probably because the property has been changed in the target system. 
 The user sa will occur on any change that has been done either by some internal calculation of OneIM or if you execute a script in the job service that applied the changes.

Markus Weiss-Ehlers · Answer

There is no 100% as someone could configure the system to use the Synchronization user for executing scripts on the job service via the application server. But this would need additional configuration, that someone would need to do for the job services explicitly and this is no ootb scenario.

Endpoint Privilege Management

In object changed History of ADSAccount ,what is the difference changed by "sa" and changed by "synchronization"

Top Replies