Hi everyone, I hope I'm posting this in the right place. I've been reading through the forum for a while, but this is my first time actually posting. I manage the software tools for a small design agency, and we've been using Netskope for a few months now.
I've run into a bit of a housekeeping issue that I'm hoping someone can help me walk through. As our team has changed—a few contractors came and went, and we had a couple of full-time hires who didn't last long—I think our portal has gotten a bit messy. I keep finding user entries that seem to be leftover or "orphaned," and I'm worried it might be causing some confusion in our policy application, or maybe even a security concern? I'm not entirely sure.
I was wondering if anyone has a reliable process for auditing and cleaning these up? I'm looking for a guide that doesn't assume too much prior knowledge. Specifically, I'm unsure about how to definitively identify which entries are truly orphaned versus ones that might be tied to any lingering logs or policies. Also, is there a safe order to do things in? Like, should I check for associated policies first, then remove from groups, or is there another sequence I should follow?
The admin side of things isn't my strongest skill, and I'm always nervous about breaking something we rely on. Any step-by-step advice, or even just knowing what to look out for, would be so appreciated. Thank you in advance for your patience
Yeah, spotting real orphans is the tricky part. I usually cross-reference the portal list with our latest HR export first.
Have you checked the activity logs for those users? That can show if a "stale" entry still has recent API calls or login attempts you missed. If there's no activity for months, they're usually safe to clean.
What about groups and policies? Do you have many nested groups?