Scheduled Jobs should not be run by inactive/locked out users

Impact area

Manageability

Severity

high

high

Affected element

Benchmark Scheduled Scrip

Scheduled Data Collection

Scheduled Data Import Set

Scheduled Email of Custom Chart

Scheduled Email of Query Builder

Scheduled Email of Report

Scheduled Entity Generation

Scheduled Report Summary Generation

Scheduled Script Execution

Rule ID

SN-0471

Impact

Scheduled jobs perform tasks that might require special access to resources. The user selected in the \"Run as\" field must be a valid and active user, and must have access to the resources accessed by the job in order for the job to be be successfully executed. This rule will detect scheduled jobs which have been configured with a user id in the \"Run as\" field which is inactive or locked out.

Remediation

Validate that all jobs configured with a specific user id in the "Run as" refer to users which are active and not locked out.


Time to fix

10 min




Last modified on Nov 14, 2023