Posts

usershistory

  this is that query: select u.username, uh.changelog as attribute_change, uh.updatedate as update_timestamp, uh.updatedby from usershistory uh join users u on uh.userkey = u.userkey where uh.updatedate > now() - interval 7 day order by uh.updatedate desc;   1. select u.username, uh.changelog as attribute_change, uh.updatedate as update_timestamp, uh.updatedby from usershistory uh join users u on uh.userkey = u.userkey where uh.updatedate > now() - interval 7 day order by uh.updatedate desc; 2. Further customized query, here's how maybe you can filter the logic: select u.username, uh.changelog as attribute_change, uh.updatedate as update_timestamp, uh.updatedby, case when uh.changelog like '%customer%' then 'trigger first call' else 'trigger second call' end as update_action from usershistory uh join users u on uh.userkey = u.userkey where uh.updatedate > now() - interval 7 day order by uh.updatedate desc;  

IIS Server

 Special Instructions and Additional Notes • Windows Server Version: Windows Server 2016 or later is recommended. • CPU: Minimum of 4 cores (64-bit). • RAM: At least 16 GB. • Storage: A minimum of 100 GB of available disk space.

SQL Inactive Account with Access Removal

 SELECT ev.entitlement_value AS GROUPNAME, ac.name AS accName, a.username AS USERNAME, a.firstname AS FIRSTNAME, a.lastname AS LASTNAME, a.email AS EMAIL, a.startdate AS STARTDAT, a.companyname AS COMPANYNAME, a.employeeclass AS EMPLOYEECLASS, a.entity AS ENTITY, a.employeetype AS EMPLOYEETYPE, a.regioncode, a.customproperty3,a.customproperty10, a.customproperty13, a.country, a.customproperty32, a.userkey AS userKey, ac.accountkey AS acctKey, ev.entitlement_valuekey AS entvaluekey, 'Deprovision Access' AS Default_Actaion_For_Analytics, NOW() AS today FROM accounts ac JOIN user_accounts ua ON ua.accountkey = ac.accountkey JOIN users a ON a.userkey = ua.userkey JOIN account_entitlements1 ae ON ae.accountkey = ac.accountkey AND ae.entitlement_valuekey IS NOT NULL JOIN entitlement_values ev ON ev.entitlement_valuekey = ae.entitlement_valuekey AND ev.status = 1 JOIN entitlement_types et ON et.entitlementtypekey = ev.entitlementtypekey AND et.entitlementname = 'AADGroup' JOIN...

Service Account Metadata SQL

 SELECT DISTINCT      e.endpointname AS application,     a.name AS 'Account Name',     a.accounttype AS 'Account Type',     CASE          WHEN ao.OWNERUSERKEY IS NOT NULL THEN 'user'          WHEN ao.OWNERUSERGROUPKEY IS NOT NULL THEN 'usergroup'          ELSE 'Blank'      END AS 'Owner Type',     COALESCE(CAST(ao.RANK AS CHAR), 'Blank') AS 'Owner Rank',     COALESCE(uo.username, ug.USER_GROUPNAME, 'Blank') AS 'Owner user',     COALESCE(CONCAT(uo.firstname, ' ', uo.lastname), ug.USER_GROUPNAME, 'Blank') AS 'Owner Name',     COALESCE(uo.email, ug.USER_GROUPNAME, 'Blank') AS 'Owner Email',     CASE          WHEN ao.OWNERUSERKEY IS NOT NULL THEN              CASE                  WHEN uo.statuskey = ...

SCF

 https://github.com/saviynt/saviynt-user-custom-validation-jar

Role Provisioning

 SELECT    ue.name,    ue.acctKey,    ue.userkey,    re.rolekey,    re.rolename,    'Provision Role' as 'Default_Action_For_Analytics'FROM    (        SELECT            U.USERNAME AS name,            A.ACCOUNTKEY AS acctKey,            U.USERKEY AS userkey,            GROUP_CONCAT(DISTINCT E.ENTITLEMENT_VALUEKEY) AS MATCHING_ENTITLEMENT_KEY        FROM USERS U                 JOIN USER_ACCOUNTS UA ON U.USERKEY = UA.USERKEY                 JOIN ACCOUNTS A ON UA.ACCOUNTKEY = A.ACCOUNTKEY                 JOIN ACCOUNT_ENTITLEMENTS1 AE ON A.ACCOUNTKEY = AE.ACCOUNTKEY                 J...