AD Create Account JSON with Service Account

 -defination of critical apps

- audit issue



 

{

  "accountExpires": "0",

  "cn": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? task.accountName : usersObj?.displayname}",

  "co": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.country}",

  "department": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.departmentname}",

  "displayName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? task.accountName : usersObj?.displayname}",

  "employeeID": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.employeeid}",

  "employeetype": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? 'Service Account' : usersObj?.employeeType}",

  "givenName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? 'SVC' : usersObj?.firstname}",

  "middleName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.middlename}",

  "l": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.city}",

  "st": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.state}",

  "company": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.companyname}",

  "telephonenumber": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.secondaryPhone}",

  "manager": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? ServiceAccountOwnerMap.get('USEROWNERS')?.get('1')?.collect{it.customproperty29?.toString()}[0] : managerAccount.customproperty22}",

  "mobile": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.phonenumber}",

  "mail": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.email}",

  "name": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? task.accountName : usersObj?.displayname}",

  "objectClass": [

    "top",

    "person",

    "organizationalPerson",

    "user"

  ],

  "sAMAccountName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.username}",

  "sn": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? 'SerAcc' : usersObj?.lastname}",

  "title": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.title}",

  "userPrincipalName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? task.accountName.replaceAll('\\s+', '-').toLowerCase() + '@ewec.local' : usersObj?.email}",

  "userAccountControl": "544",

  "physicalDeliveryOfficeName": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.companyname}",

  "msDS-cloudExtensionAttribute1": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.customproperty3}",

  "msDS-cloudExtensionAttribute2": "${ServiceAccountOwnerMap.get('ServiceAccountType') == 'Service Account' ? null : usersObj?.startdate}"

}

 

Comments

Post a Comment

Popular posts from this blog

Enhanced Query - To Update Account Status and Name

select accountkey as accounts__primarykey, 'SUSPENDED FROM IMPORT SERVICE' as accounts__status, CONCAT(name,'-Deleted on-', DATE_FORMAT(NOW(), '%Y-%m-%d %H:%i:%s'))as accounts__name from accounts where endpointkey=527 and name='CN=INRVCH,OU=User Accounts Vista,OU=User Accounts,OU=User Directory,DC=asia-pac,DC=xx,DC=com'  and status not in ('SUSPENDED FROM IMPORT SERVICE') limit 1;
Read more

Connection Config - STATUS_THRESHOLD_CONFIG

 {   "statusAndThresholdConfig": {    "inactivateAccountsNotInFile": true    "statusColumn":"userlock",    "activeStatus":["0","128","192"],     "accountThresholdValue": 500,     "deleteLinks": false,     "correlateInactiveAccounts": true,        } } ----------------------------------------------------------------------------- When account import run above STATUS_THRESHOLD_CONFIG is used to check. ----------------------------------- inactivateAccountsNotInFile  ==> True/false true ---> Account status 1/2 ( Active/Inactive) Day 1 --> 100 Accounts import Day 2 --> 90 Diff= 10  ( 90= Active , 10 Inactive)  ------------------------------------------------------------------------------ ----------------------------------- inactivateAccountsNotInFile  ==> True/false false ---> Account status 1/SFIS ( Active/SUSPENDED FROM IMPORT SERVICE.) Day 1 --> 100 Ac...
Read more

SQL - Connection table

 select EXTERNALCONNECTIONKEY,CONNECTIONDESCRIPTION,CONNECTIONNAME,CONNECTORMS,CREATEDBY,CREATEDON,CREDENTIALCHANGECONFIG,EMAILTEMPLATE,EXTERNALCONNECTIONTYPE,MSCONNECTORVERSION,NODE_MAC_ID,SSLCERTIFICATE,STATUS s,STATUSFORENABLEDISABLE,TEMPLATE_MANDATORYDATA,TEMPLATENAME,UPDATEDBY,UPDATEDON,VAULTCONFIG,VAULTCREDENTIALCONNECTION,CONNECTORTYPE  from externalconnection  SELECT   eh . connectionname ,         CASE           WHEN   eh . operation   =   'Remove'                AND   (   eh . newvalue   IS   NULL                       OR   eh . newvalue   =   ''   )   THEN   'ROLE_ADMIN'           ELSE   Conca...
Read more