Posts

Showing posts from May, 2025

SQL Inactive Account with Access Removal

 SELECT ev.entitlement_value AS GROUPNAME, ac.name AS accName, a.username AS USERNAME, a.firstname AS FIRSTNAME, a.lastname AS LASTNAME, a.email AS EMAIL, a.startdate AS STARTDAT, a.companyname AS COMPANYNAME, a.employeeclass AS EMPLOYEECLASS, a.entity AS ENTITY, a.employeetype AS EMPLOYEETYPE, a.regioncode, a.customproperty3,a.customproperty10, a.customproperty13, a.country, a.customproperty32, a.userkey AS userKey, ac.accountkey AS acctKey, ev.entitlement_valuekey AS entvaluekey, 'Deprovision Access' AS Default_Actaion_For_Analytics, NOW() AS today FROM accounts ac JOIN user_accounts ua ON ua.accountkey = ac.accountkey JOIN users a ON a.userkey = ua.userkey JOIN account_entitlements1 ae ON ae.accountkey = ac.accountkey AND ae.entitlement_valuekey IS NOT NULL JOIN entitlement_values ev ON ev.entitlement_valuekey = ae.entitlement_valuekey AND ev.status = 1 JOIN entitlement_types et ON et.entitlementtypekey = ev.entitlementtypekey AND et.entitlementname = 'AADGroup' JOIN...

Service Account Metadata SQL

 SELECT DISTINCT      e.endpointname AS application,     a.name AS 'Account Name',     a.accounttype AS 'Account Type',     CASE          WHEN ao.OWNERUSERKEY IS NOT NULL THEN 'user'          WHEN ao.OWNERUSERGROUPKEY IS NOT NULL THEN 'usergroup'          ELSE 'Blank'      END AS 'Owner Type',     COALESCE(CAST(ao.RANK AS CHAR), 'Blank') AS 'Owner Rank',     COALESCE(uo.username, ug.USER_GROUPNAME, 'Blank') AS 'Owner user',     COALESCE(CONCAT(uo.firstname, ' ', uo.lastname), ug.USER_GROUPNAME, 'Blank') AS 'Owner Name',     COALESCE(uo.email, ug.USER_GROUPNAME, 'Blank') AS 'Owner Email',     CASE          WHEN ao.OWNERUSERKEY IS NOT NULL THEN              CASE                  WHEN uo.statuskey = ...

SCF

 https://github.com/saviynt/saviynt-user-custom-validation-jar

Role Provisioning

 SELECT    ue.name,    ue.acctKey,    ue.userkey,    re.rolekey,    re.rolename,    'Provision Role' as 'Default_Action_For_Analytics'FROM    (        SELECT            U.USERNAME AS name,            A.ACCOUNTKEY AS acctKey,            U.USERKEY AS userkey,            GROUP_CONCAT(DISTINCT E.ENTITLEMENT_VALUEKEY) AS MATCHING_ENTITLEMENT_KEY        FROM USERS U                 JOIN USER_ACCOUNTS UA ON U.USERKEY = UA.USERKEY                 JOIN ACCOUNTS A ON UA.ACCOUNTKEY = A.ACCOUNTKEY                 JOIN ACCOUNT_ENTITLEMENTS1 AE ON A.ACCOUNTKEY = AE.ACCOUNTKEY                 J...

SOD Utility

 C:\Users\rushi\Downloads\SoD\Blackline_SOD.xlsx C:\Users\rushi\Downloads\toxic_sod_risks.xlsx "C:\Program Files (x86)\Java\jre1.8.0_421\bin\java" -jar "C:\Users\rushi\Downloads\SoD\SoDCreate.jar" C:\Users\rushi\Downloads\SoD\Blackline.xlsx

SC2

 systemctl status openvpn-client@client cat /etc/openvpn/client.conf cat /etc/openvpn/client.conf sysctl -p

kerberos

 $results = setspn -Q "MSSQLSvc/*" | Where-Object { $_ -match "^MSSQLSvc/" } $parsed = $results | ForEach-Object {     if ($_ -match "^(MSSQLSvc/.*?):\s*(CN=.*)$") {         [PSCustomObject]@{             SPN = $matches[1]             Account = $matches[2]         }     } elseif ($_ -match "^(MSSQLSvc/.*)$") {         [PSCustomObject]@{             SPN = $matches[1]             Account = ""         }     } } $parsed | Export-Csv -Path MSSQL_SPNS.csv -NoTypeInformation

Reopen tasks

SELECT ars.taskkey AS 'Task ID', CASE WHEN ars.tasktype = 1 THEN 'Add access' WHEN ars.tasktype = 2 AND ars.entitlement_valuekey IS NOT NULL THEN 'Remove access' WHEN ars.tasktype = 2 AND ars.entitlement_valuekey IS NULL THEN 'Remove account' WHEN ars.tasktype = 3 THEN 'New account' WHEN ars.tasktype = 4 THEN 'Role request' WHEN ars.tasktype = 5 THEN 'Change password' WHEN ars.tasktype = 6 THEN 'Enable account' WHEN ars.tasktype = 8 THEN 'Delete account' WHEN ars.tasktype = 9 THEN 'Update user' WHEN ars.tasktype = 12 THEN 'Update account' WHEN ars.tasktype = 14 THEN 'Disable account' WHEN ars.tasktype = 18 THEN 'Create user (From create user tile)' WHEN ars.tasktype = 19 THEN 'Update user (From update user tile)' WHEN ars.tasktype = 24 THEN 'Create entitlement' WHEN ars.tasktype = 25 THEN 'Add access entitlement' WHEN ars.tasktype = 26 THEN 'Remove access ...