Merge pull request #25 from fn20200323/usersInGroupsInactive

Check for users in inactive groups

Author: phifogg

README.md

@@ -118,6 +118,11 @@ The platform is Javascript and a lot of code is run in a global variable scope.
 ### Admins not logged in for 1 month
 Monitor users with role `admin` (not locked out) that are not logged for longer than 1 month
 
+### Users left in already inactivated Groups
+After deactivation of Groups there can be still some users.
+Group offer membership but also can provide some roles that after deactivation should be considered as no longer needed.
+
+
 ## Category: User Experience
 
 

scan_table_check_5adc555e2f9b30100b40bea62799b6e3.xml

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unload unload_date="2021-10-21 19:59:27">
+<scan_table_check action="INSERT_OR_UPDATE">
+<active>true</active>
+<advanced>true</advanced>
+<attributes display_value="Users belongs to inactive Group">a49d119e2f9b30100b40bea62799b627</attributes>
+<category>security</category>
+<conditions table="sys_user_grmember">group.active=false^EQ<item goto="false" or="false" field="" endquery="true" value="" operator="=" newquery="false"/>
+</conditions>
+<description/>
+<documentation_url/>
+<name>Users belongs to inactive Group</name>
+<priority>3</priority>
+<resolution_details/>
+<script><![CDATA[(function(finding, current) {
+
+	var grGroup = new GlideRecord("sys_user_group");
+	grGroup.get(current.group);
+
+	finding.setCurrentSource(grGroup);
+	finding.increment();
+
+
+})(finding, current);]]></script>
+<short_description>List users that still belongs to already inactivated groups</short_description>
+<sys_class_name>scan_table_check</sys_class_name>
+<sys_created_by>admin</sys_created_by>
+<sys_created_on>2021-10-21 19:31:07</sys_created_on>
+<sys_id>5adc555e2f9b30100b40bea62799b6e3</sys_id>
+<sys_mod_count>3</sys_mod_count>
+<sys_name>Users belongs to inactive Group</sys_name>
+<sys_package display_value="Global" source="global">global</sys_package>
+<sys_policy/>
+<sys_scope display_value="Global">global</sys_scope>
+<sys_update_name>scan_table_check_5adc555e2f9b30100b40bea62799b6e3</sys_update_name>
+<sys_updated_by>admin</sys_updated_by>
+<sys_updated_on>2021-10-21 19:59:01</sys_updated_on>
+<table>sys_user_grmember</table>
+<use_manifest>false</use_manifest>
+</scan_table_check>
+</unload>