Managing Multi-Host Account Aggregation Groups

Account aggregation is the process of loading account data into Identity Security Cloud from external sources. Account aggregation groups enable centralized management of account aggregation for multiple sources.

An account aggregation group can contain a maximum of 10 sources. During the source creation process, the required number of account aggregation groups are automatically created and sources are automatically distributed between groups.

Note

Manual creation of account aggregation groups and manual allocation of sources within the groups is not supported.

You can schedule or manually start account aggregations.

Scheduling Aggregations for Multi-Host Account Aggregation Groups

You can schedule aggregation to automatically load new account data for all aggregation groups through global scheduling or set specific schedules for each aggregation group.

To set up aggregation scheduling:

1. Go to Admin > Connections > Multi-Host Sources and select a multi-host group.

2. Select Edit to view configuration details about the multi-host group.

3. From the left navigation, select Account Management > Account Aggregation.

   

4. Choose whether to enable global scheduling or set the schedule for each aggregation group:

   • To define a single schedule to aggregate sources in all aggregation groups in the multi-host group, select the Enable Global Scheduling toggle and set the frequency, time, and day or date when the aggregation should run. Select Preview to see how the schedule will be distributed across the aggregation groups.
   • To define a different schedule for each aggregation group, select the Enable Scheduling toggle for each aggregation group and set the frequency, time, and day or date when the aggregation should run for that group.

   You can still manually aggregate sources in each aggregation group.

   Refer to Scheduling Aggregations for Direct Connect Sources for guidance on frequency, time, and recurrence options.

5. (Optional) Select the Disable Account Deletion checkbox to ensure no accounts are deleted.

   Alternatively, you can set the percentage of allowed deleted accounts per aggregation in the Account Delete Threshold section. Choose a percentage from the dropdown list or enter the percentage of accounts in the threshold field. Select Save to save your changes.

   Note

   The percentage must be an integer between 1 and 100. If the deletions exceed this value, no accounts will be deleted. SailPoint recommends using this option to avoid removing user data in the event of a misconfiguration.

   Account Deletion Limitations

   • If a source has 10 or fewer accounts, setting this value to 4 percent or less will result in the number being rounded to 1 percent to prevent all accounts from being deleted.
   • If a source has 11 - 20 accounts, setting this value to 2 percent or less will will result in the number being rounded to 1 percent to prevent all accounts from being deleted.

6. Select Save to save your scheduling changes.

Notes

• To maintain peak aggregation performance, the first source within the group will start aggregation, followed after a short delay by the next source, until all sources have started aggregation.
• If aggregation fails for a specific source within the aggregation group, the process will move on to the next source and continue the aggregation process.

Manually Aggregating Multi-Host Account Aggregation Groups

You can manually aggregate account data for sources within an account aggregation group from the Account Aggregation page.

1. Go to Admin > Connections > Multi-Host Sources and select a multi-host group.

2. Select Edit to view configuration details about the multi-host group.

3. From the left navigation, select Account Management > Account Aggregation.

4. (Optional) Select the Disable Account Deletion checkbox to ensure no accounts are deleted.

   Alternatively, you can set the percentage of allowed deleted accounts per aggregation in the Account Delete Threshold section. Choose a percentage from the dropdown list or enter the percentage of accounts in the threshold field. Select Save to save your changes.

   Note

   The percentage must be an integer between 1 and 100. If the deletions exceed this value, no accounts will be deleted. SailPoint recommends using this option to avoid removing user data in the event of a misconfiguration.

   Account Deletion Limitations

   • If a source has 10 or fewer accounts, setting this value to 4 percent or less will result in the number being rounded to 1 percent to prevent all accounts from being deleted.
   • If a source has 11 - 20 accounts, setting this value to 2 percent or less will will result in the number being rounded to 1 percent to prevent all accounts from being deleted.

5. Select Manual Aggregation to load account data for all sources in the aggregation group.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.