How do I exclude service accounts from workflow report?

Loading

Skip to Navigation Skip to Main Content

Search

Search

Select Language

0D54z0000AIar5zCQBOkta Classic EngineWorkflowsAnswered2024-12-31T16:44:18.000Z2024-12-03T16:11:13.000Z2024-12-31T16:44:18.000Z

RashadR.45204 (Customer) asked a question.

December 3, 2024 at 4:11 PM

How do I exclude service accounts from workflow report?

I have a running workflow that notifies me when a user's status is active but they have not used their Okta account in x number of days.

However, I have some service accounts that I'd like to exclude from that list. How do I run the report excluding service accounts?

In the user's profile, I have them marked as either service accounts or user accounts, but their profile type doesn't reflect this.

UserType Profile - https://share.zight.com/E0uNWdvr

UserType - https://share.zight.com/yAug8xwJ

How can I exclude service accounts from my report?

Top Rated Answers

MatthewH.10249 (State of Iowa)
a year ago
We have custom user attributes as described in that second link I previously provided and I'm able to select and view these custom attributes using "Okta - Read User" action card in our Workflows. They will be listed as "Profile Properties" when you first create that card. NOTE: MAKE SURE YOU WAIT FOR THE LIST TO LOAD BEFORE YOU PRESS THE SAVE BUTTON. If you already created the "Okta - Read User" event card and pressed save you can click the gear icon found at the bottom right and then select "Choose fields" and make sure to wait for the list of fields to load before pressing save.

If you are not seeing the field you want you should double check it exists in the "Custom" tab section of DirectoryProfile Editor and click the Users tab. Click the User (default) profile. If it exists and you still cannot find it in the "Okta - Read User" Workflow action card I would suggest you open a support ticket or attend a Workflows online meetup. https://devforum.okta.com/t/upcoming-okta-workflows-online-meetups/29932
Expand Post
Selected as Best

All Answers

MatthewH.10249 (State of Iowa)
a year ago
What attribute in the user's profile are you using to mark them as a service account? Are you using Okta Privileged Access to create Service accounts or just creating users in Okta OIE and flagging them as service accounts in some way?
Expand Post
MatthewH.10249 (State of Iowa)
a year ago
In your Workflow have you tried to use the "Okta - Read User" card and see if the profile attribute you are setting shows up there that you could then use to evaluate?
Expand Post
RashadR.45204 (Customer)
a year ago
Hey Matthew,

Thank you for your response. I'm getting back late; I was on vacation.

"What attribute in the user's profile are you using to mark them as a service account? "

"Okta - Read User" card and see if the profile attribute you are setting shows up there that you could then use to evaluate? - > I tried Okta - Read User, but I believe it only reads the UserType field in the profile itself.

Expand Post
- MatthewH.10249 (State of Iowa)
  a year ago
  Are your user types similar the ones described in the following documentation?
  https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-usertypes-about.htm
  
  Or did you add custom user attributes as described in the following documentation?
  https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-about-profiles.htm#:~:text=These%20are%20the%20three%20profile,The%20app%20user%20profile
  Expand Post
RashadR.45204 (Customer)
a year ago
Our environment is second up more so with the second link you provided.
https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-about-profiles.htm#:~:text=These%20are%20the%20three%20profile,The%20app%20user%20profile

The majority of our OKTA accounts are pulled from AD, and the attributes are populated from there.
Expand Post
MatthewH.10249 (State of Iowa)
a year ago
We have custom user attributes as described in that second link I previously provided and I'm able to select and view these custom attributes using "Okta - Read User" action card in our Workflows. They will be listed as "Profile Properties" when you first create that card. NOTE: MAKE SURE YOU WAIT FOR THE LIST TO LOAD BEFORE YOU PRESS THE SAVE BUTTON. If you already created the "Okta - Read User" event card and pressed save you can click the gear icon found at the bottom right and then select "Choose fields" and make sure to wait for the list of fields to load before pressing save.

If you are not seeing the field you want you should double check it exists in the "Custom" tab section of DirectoryProfile Editor and click the Users tab. Click the User (default) profile. If it exists and you still cannot find it in the "Okta - Read User" Workflow action card I would suggest you open a support ticket or attend a Workflows online meetup. https://devforum.okta.com/t/upcoming-okta-workflows-online-meetups/29932
Expand Post
Selected as Best
RashadR.45204 (Customer)
a year ago
Thank you for this.

I'll try the "Okta-Read" user card again.
Maybe I missed a step.
Expand Post

This question is closed.

Recommended content

Forum

How do I open a support ticket from Integrator Account?

Forum

How do I report a Smshing text from the okta number

Forum

How do I get a list or report of active users in our account?

Forum

We have our users set up by groups. I would like to be able to run reports by group but cannot find how to do that.

Loading

How do I exclude service accounts from workflow report?