How can I determine account definition removal?

lrigs 12 months ago

Hello,

We have been seeing some Person's getting removed from an Account Definition by SA. I'm not certain why these have occurred. Nothing fired any of the retain account definition options. Can someone tell me how I can determine why this is happening. I see in the Time trace the SA made the removal.

Top Replies

Niels de Groot 11 months ago +2
Maybe this query will help for backtracking the root cause.
For more info see: https://support.oneidentity.com/technical-documents/identity-manager/9.1.1/configuration-guide/66#TOPIC-1990495
```
DECLARE @XObjectKey…
```

0 Niels de Groot 11 months ago

Maybe this query will help for backtracking the root cause.
For more info see: https://support.oneidentity.com/technical-documents/identity-manager/9.1.1/configuration-guide/66#TOPIC-1990495

DECLARE @XObjectKey AS VARCHAR(128)
SET @XObjectKey = '<Key><T>PersonHasTSBAccountDef</T><P>...</P><P>...</P></Key>'

SELECT dwo.OperationDate
	,dwo.GenProcID
	,dwo.ObjectKeyOfRow
	,dwo.DisplayValue
	,dwo.OperationLevel
	,dwo.OperationType
	,dt.TableName
	,dc.ColumnName
	,dwp.ContentShort
	,dwo.OperationUser
FROM DialogWatchOperation dwo
LEFT JOIN DialogWatchProperty dwp ON dwp.UID_DialogWatchOperation = dwo.UID_DialogWatchOperation
JOIN DialogColumn dc ON dc.UID_DialogColumn = dwp.UID_DialogColumn
JOIN DialogTable dt ON dt.UID_DialogTable = dc.UID_DialogTable
WHERE dwo.OperationDate BETWEEN '2023/05/01'
		AND '2023/05/03'
	AND (
		dwo.GenProcID IN (
			SELECT GenProcIDOrigin
			FROM DialogProcessSubstitute
			WHERE GenProcIDNew IN (
					SELECT GenProcID
					FROM DialogWatchOperation
					WHERE ObjectKeyOfRow = @XObjectKey
						AND dwo.OperationType = 'D'
					)
			)
		OR dwo.GenProcID IN (
			SELECT GenProcID
			FROM DialogWatchOperation
			WHERE ObjectKeyOfRow = @XObjectKey
				AND dwo.OperationType = 'D'
			)
		)
ORDER BY dwo.OperationDate ASC

Endpoint Privilege Management

How can I determine account definition removal?

Top Replies