Josys offers two primary methods to identify and manage shadow users. See the topic Shadow IT for more information.
- From Managed Apps
- From User Profiles
Managing Shadow Users from Managed Apps
Managed Apps provides an overview of integrated applications and their associated user accounts. You can notice the shadow users from the following two indicators:
- A tile shows the total count of potentially unauthorized user records across all managed apps.
- The table listing the managed apps discretely displays a Shadow User as one of the columns.
Note: You cannot delete an entire app from this section to disassociate a shadow user, as that would revoke access for all provisioned users, including the shadow users. Perform the following steps to take necessary action on the identified shadow users:
Step 1: Click an app name to open its details page listing all associated user accounts.
Step 2: A grey "!" icon denotes a shadow user. Click "Delete" against the corresponding shadow user to revoke access to that particular app. Alternatively, click a shadow user row to open the user profile details page. Perform the steps as detailed in the Managing Shadow Users from User Profiles.
Managing Shadow Users from User Profiles
The User Profiles section also allows direct identification and management of shadow user access from the "User Profiles" page and "User Profile Details" page.
From the User Profiles page
Step 1: Click the "Shadow Users" tab to view a tabulated list of all flagged shadow user accounts. These can also be identified by the grey "!" icon next to the user name.
Step 2: Click the Delete action against the corresponding account name to completely revoke a shadow user's access from all associated applications and devices.
From the User Profile Details page
To manage shadow users from the user profile details page, you can use either of the following options:
- Mapping to Existing User Profile
- Converting to new User Profiles
- Deleting the User Account