Search This Blog

Wednesday, March 2, 2022

Programmatic options for Account Aggregation

When running an account aggregation you have to feed a Map of values.  This listing shows the names and the checkboxes it checks on the UI.


CheckboxCodeDescription
Select Applications to ScanapplicationsList of application names, comma separated
Optionally select a rule ..creationRuleSpecify rule name
Refresh Assigned and Detected RolescorrelateEntitlementsRefresh roles on aggregation ??
Check Active PoliciescheckPoliciesRun through policy checking on aggregation
Only create links if they..correlateOnlyDo not create uncorrelated identities
Refresh identity risk scorecardsrefreshScorecardRisk scorecards
Maintain identity historiescheckHistorySee history pages
Enable delta aggregationdeltaAggregationIf the connector supports this
Detect deleted accountscheckDeletedDetect deleted accounts - do not use with delta or targeted agg
Maximum deleted accountscheckDeletedThresholdIf more than this, do not delete
Refresh assigned scopecorrelateScopeRefresh scopes based on attributes
Disable auto creation of scopesnoAutoCreateScopesIf enabled do not do this
Disable optimizationnoOptimizeReaggregationProcess every account - no optimization
Promote managed attributespromoteManagedAttributesOnly use this if there is no group schema
Disable auto creation of appsnoAutoCreateApplicationsIf enabled do not do this
Disable marking as needing refreshnoNeedsRefreshDo not set needsRefresh to true
Enable partitioningenablePartitioningEnables partitioning if supported
Objects per partitionobjectsPerPartionIf the connector supports
Loss limitlossLimitIf the connect supports
Terminate when maximumhaltOnMaxErrorSelf explanatory
Maximum errors beforemaxErrorThresholdShould specify this
Sequential ExecutionsequentialTerminate sequence on error
Actions to includelogAllowedActionsSee options: comma sep list

List of logAllowedActions options: (I recommend never using this): 
  • CorrelateManual
  • CorrelateMaintain
  • CorrelateNewAccount
  • CorrelateReassign
  • Create
  • Ignore
  • Remove