As part of a recent organizational change, John, a Security Consultant, was moved from Department...

To certify all existing entitlements of John by relevant stakeholders after he moves from Department A to B, and you have a User Update Rule to trigger a certification, the action you should configure is C. Launch Entitlement Owner Campaign. Here's why:

Saviynt's Certification Campaigns: Saviynt supports various types of certification campaigns to review and validate user access.

Entitlement Owner Campaign: This specific campaign type is designed to have the owners of entitlements (typically application or business owners) review and certify the users who have access to those entitlements.

User Update Rule Trigger: The User Update Rule, triggered by the department change, can initiate the certification process.

Least Privilege Principle: This approach aligns with the principle of least privilege by ensuring that access is regularly reviewed and validated, especially after significant changes like a department transfer.

Why Other Options Are Less Suitable:

A. Launch Manager Campaign: While manager campaigns are useful, they might not be the most appropriate in this case. Entitlement owners are generally more knowledgeable about who should have access to specific entitlements.

B. Launch Service Account Campaign: This is for certifying service accounts, not user entitlements.

D. Launch Organization Owner Campaign: This is not a standard campaign type in Saviynt and might not be relevant to certifying user entitlements.

In conclusion: Launching an Entitlement Owner Campaign from a User Update Rule triggered by a department change is the most effective way to ensure that John's existing entitlements are reviewed and certified by the appropriate stakeholders, adhering to the principle of least privilege.