create time/ period (days) based access in servicenow for users and groups provisioned from Entra id

RonaldT
Tera Contributor

3 weeks ago

Users and groups get created/provisioned in ServiceNow via Microsoft Entra ID, we want them to have access for X number of days and then get removed from groups which they were added by Entra.

is this possible or any other suggestions .

0 Helpfuls
  • 1,127 Views
5 REPLIES 5

Kieran3
Mega Sage

2 weeks ago

Hi @RonaldT,

 

I'd recommend a different approach to @Mrudula6. To start, use a scheduled job or flow that identifies those accounts which aren't used in X number of days.

 

Then, either deactivate the account in Entra using an integration (like the Microsoft Entra ID spoke) or delete it. If you are unable to use an integration for this, have a task raised to the appropriate team to action.

 

Once the account is deactivated, it shouldn't be able to sign in to ServiceNow. Now you can choose how you handle the account. I'd recommend archiving them after a small period of being deactivated and then adding an appropriate deletion rule (aligning with your data owner and organisations processes).

 

If you have any further questions, please reply and I'm happy to help 🙂

Hope this helps! If you found it useful, feel free to leave a 👍 Kudos. If it answered your question, accepting it as a solution helps others find the answer too.