Skip to main content

Cornell University

Resource Accounts and Automated Processes

This article describes special uses of Resource Accounts (primarily Exchange Group Accounts) where the mailstore is accessed by an automated process. If your Resource Account mail is read by human beings (who access the Exchange server), you don't need to read this.

This article applies to: Resource Accounts

Automated connections to mailboxes are supported for HoldingIDs, not personal accounts. Personal account connections would  be incompatible with Two-Step Login.

Resource Accounts accessed by automated processes fall into three main groups:

  • If you have a Resource Account that you need to "poll," (periodically log in and retrieve email using the POP or IMAP protocol), then you will need a HoldingID to automate the process. Resource Accounts do not have a password of their own, and of course you would never think of embedding your own NetID and password in a script, so this provides you with an ID that you can use explicitly for that purpose. A single HoldingID can be used to access more than one Resource Account.
  • If you have email delivered to a process via SMTP, then you do not need a HoldingID. You can tell that you have this case if the address of the automated process appears in the routing for the Resource Account.
  • If your Resource Account is directed to a Remedy queue, you will be contacted by the Remedy staff with instructions. Do not follow the steps in this article.

HoldingIDs are created and administered in CornellAD (Active Directory).

Here are the steps needed to use a HoldingID with a Resource Account.

  1. The Primary OU Admin for the unit creates the HoldingID. Because a single HoldingID can be used to access more than one Resource Account, choose a name for the HoldingID based on the department or project group, not the name of the Resource Account. (List of OU Admins for most campus units)
  2. The Resource Account owner (or the unit's primary admin) submits a ticket to asking to have the HoldingID enabled for Resource Accounts. Then:
    • Identity Management moves the HoldingID to OU CUniv/MessagingObjects/HoldingIDs.
    • Identity Management notifies the customer that the HoldingID can now be used for Resource Accounts.
  3. The Resource Account owner or administrators can assign Access privileges to the HoldingID using the Exchange Account Manager.

For a fuller discussion, see our Technical Issues: Resource Accounts and Automated Processes article.


To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.