From 510193b1c60747773f83b5cf99a5a91ad238f55a Mon Sep 17 00:00:00 2001
From: fn20200323 <20200323@qwedc.eu.org>
Date: Thu, 21 Oct 2021 22:39:22 +0200
Subject: [PATCH] Check for users in inactive groups

---
 README.md                                     |  5 +++
 ...check_5adc555e2f9b30100b40bea62799b6e3.xml | 41 +++++++++++++++++++
 2 files changed, 46 insertions(+)
 create mode 100644 scan_table_check_5adc555e2f9b30100b40bea62799b6e3.xml

diff --git a/README.md b/README.md
index 18934ed..b57a566 100644
--- a/README.md
+++ b/README.md
@@ -118,6 +118,11 @@ The platform is Javascript and a lot of code is run in a global variable scope.
 ### Admins not logged in for 1 month
 Monitor users with role `admin` (not locked out) that are not logged for longer than 1 month
 
+### Users left in already inactivated Groups
+After deactivation of Groups there can be still some users.
+Group offer membership but also can provide some roles that after deactivation should be considered as no longer needed.
+
+
 ## Category: User Experience
 
 
diff --git a/scan_table_check_5adc555e2f9b30100b40bea62799b6e3.xml b/scan_table_check_5adc555e2f9b30100b40bea62799b6e3.xml
new file mode 100644
index 0000000..cfb2676
--- /dev/null
+++ b/scan_table_check_5adc555e2f9b30100b40bea62799b6e3.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unload unload_date="2021-10-21 19:59:27">
+<scan_table_check action="INSERT_OR_UPDATE">
+<active>true</active>
+<advanced>true</advanced>
+<attributes display_value="Users belongs to inactive Group">a49d119e2f9b30100b40bea62799b627</attributes>
+<category>security</category>
+<conditions table="sys_user_grmember">group.active=false^EQ<item goto="false" or="false" field="" endquery="true" value="" operator="=" newquery="false"/>
+</conditions>
+<description/>
+<documentation_url/>
+<name>Users belongs to inactive Group</name>
+<priority>3</priority>
+<resolution_details/>
+<script><![CDATA[(function(finding, current) {
+
+	var grGroup = new GlideRecord("sys_user_group");
+	grGroup.get(current.group);
+
+	finding.setCurrentSource(grGroup);
+	finding.increment();
+
+
+})(finding, current);]]></script>
+<short_description>List users that still belongs to already inactivated groups</short_description>
+<sys_class_name>scan_table_check</sys_class_name>
+<sys_created_by>admin</sys_created_by>
+<sys_created_on>2021-10-21 19:31:07</sys_created_on>
+<sys_id>5adc555e2f9b30100b40bea62799b6e3</sys_id>
+<sys_mod_count>3</sys_mod_count>
+<sys_name>Users belongs to inactive Group</sys_name>
+<sys_package display_value="Global" source="global">global</sys_package>
+<sys_policy/>
+<sys_scope display_value="Global">global</sys_scope>
+<sys_update_name>scan_table_check_5adc555e2f9b30100b40bea62799b6e3</sys_update_name>
+<sys_updated_by>admin</sys_updated_by>
+<sys_updated_on>2021-10-21 19:59:01</sys_updated_on>
+<table>sys_user_grmember</table>
+<use_manifest>false</use_manifest>
+</scan_table_check>
+</unload>