Active Directory Service Accounts Usage by AutoSys

Products

• Autosys Workload Automation

Issue/Introduction

An Active Directory Service Account can be used in AutoSys / WebUI (WCC) in several possible places

Environment

Workload Automation AutoSys

Resolution

• In the EEM User Store configuration, it is common to specify a AD service account to be used as the bind user to bind to an LDAP/Active Directory
• WebUI/WCC can have service accounts specified to use.
  • A lot of customers set the monitor ID for an AutoSys instance definition in WCC to a service account.
  • Such service account(s) can also be specified in the WCC Credentials tab.
• The easiest way to find out all in one place is to run an export of your WCC config to a file. Then search that file for service account name(s) to see where they might be used.
• To run an export, login to the WCC server and run the following command from <WCC_HOME>\bin...

For UNIX/Linux:

./wcc_config.sh -u <your_WCC_id> -x WCC_config.txt

For Windows:

wcc_config.bat -u <your_WCC_id> -x WCC_config.txt

• At the prompt, provide the password for the userid used in the -u flag above.
• In the file created by the export, search for "monitor_id".
• There maybe be more than one if there are multiple AutoSys instances configured in WCC. Those may be set to a service account.
• Search the rest of the file for service account id's