-
Notifications
You must be signed in to change notification settings - Fork 907
Check inactive users or Locked out and Removed from Groups and Roles #2413
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Check inactive users or Locked out and Removed from Groups and Roles #2413
Conversation
This code will help to populate the Manufacturer if that empty on CMDB_CI table
This script is used in ServiceNow to automatically fill in the missing manufacturer information for Configuration Items (CIs) in the CMDB (Configuration Management Database).
1. Predefined Mapping:
The script starts with a list of known model names and their corresponding manufacturer names.For example, a model called ThinkPad T14 is made by Lenovo, and MacBook Pro 16 is made by Apple
2. Look Up Manufacturer:
* It defines a function that looks up the manufacturer’s record in the core_company table (based on the name) and gets its unique ID (sys_id).
3. Find CIs Missing a Manufacturer:
* The script goes through all CIs in the cmdb_ci table where the manufacturer field is empty.
4. Update Missing Manufacturer:
* For each of those CIs:
* It checks the model name.
* If the model is in the predefined mapping:
* It looks up the correct manufacturer in the core_company table.
* It updates the CI record by setting the manufacturer field with the correct sys_id.
* It also logs that the update was successful.
* If the manufacturer is not found in the system, it logs a warning.
5. Final Log:
* After going through all matching CIs, it logs how many records were successfully updated.
Removing roles and group access from dormant users is a critical security and compliance best practice — it reduces the attack surface and prevents unauthorized access.
This script automatically finds and cleans up user accounts that meet all of the following conditions: * The user is inactive * The user is locked out * They haven’t been updated in the last 90 days
|
Thank you for your contribution. However, it doesn't comply with our contributing guidelines. As a reminder, the general requirements (as outlined in the CONTRIBUTING.md file) are the following: follow the folder+subfolder guidelines and include a README.md file explaining what the code snippet does. Validation errors: Review your contribution against the guidelines and make the necessary adjustments. Closing this for now. Once you make additional changes, feel free to re-open this Pull Request or create a new one. |
|
Thank you for your contribution. However, it doesn't comply with our contributing guidelines. As a reminder, the general requirements (as outlined in the CONTRIBUTING.md file) are the following: follow the folder+subfolder guidelines and include a README.md file explaining what the code snippet does. Validation errors: Review your contribution against the guidelines and make the necessary adjustments. Closing this for now. Once you make additional changes, feel free to re-open this Pull Request or create a new one. |
|
Thank you for your contribution. However, it doesn't comply with our contributing guidelines. As a reminder, the general requirements (as outlined in the CONTRIBUTING.md file) are the following: follow the folder+subfolder guidelines and include a README.md file explaining what the code snippet does. Validation errors: Review your contribution against the guidelines and make the necessary adjustments. Closing this for now. Once you make additional changes, feel free to re-open this Pull Request or create a new one. |
This script automatically finds and cleans up user accounts that meet all of the following conditions: