> For AI agents: the complete documentation index is available at https://www.jumpserver.com/docs/llms.txt, the full documentation bundle is available at https://www.jumpserver.com/docs/llms-full.txt.

# Discover Accounts

Discover Accounts scans managed assets for local accounts and brings the results back into JumpServer as _discovered accounts_. Reviewing that list is the fastest way to close the gap between the accounts you think exist and the accounts that actually exist on the servers.

Discovery is an automation task. It runs against the assets or nodes you select, and you can run it once or on a schedule.

## Prerequisites

- Access to **PAM > Automation > Discover Accounts** with permission to view discovered accounts and discovery tasks.
- The target assets are already managed in JumpServer. See [Assets](https://www.jumpserver.com/docs/features/console/assets/index.md).
- Each target asset has a privileged account that JumpServer can use to enumerate other accounts. Without a working privileged account the task has nothing to authenticate with and reports errors.

## Overview

The page has three tabs:

- **Discovered accounts** – results collected by executed tasks.
- **Account discovery tasks** – task definitions and their schedule.
- **Execution history** – per-run status, logs, and reports.


Note

The **Discovered accounts** list only contains results from tasks that have already run. On a fresh environment the tab is empty until you create and execute a discovery task.

![Figure 1: Discovered accounts with filters, status, and row actions](/images/v5/jumpserver/v5_admin_disc_01.png)

## Create a discovery task


1

At the top-left of the page, select , then click  **PAM**.

![image](/docs/images/docs/navs/nav-pam.png)

2

Open **Automation > Discover Accounts** and select the **Account discovery tasks** tab.

3

Click **Create**.

4

In the **Name** field, type a name that identifies the scope, for example `Linux core zone`.

5

In the **Nodes** and **Assets** fields, select the scope to scan. You can combine both; nodes include their subnodes.

6

Optionally enable **Sync to assets** so that discovered accounts are written to the matching asset account list automatically.

7

Keep **Check risk** enabled to flag discovered accounts for risk review, and select **Recipients** if the result should be emailed. Only email delivery is supported.

8

Enable **Periodic** if the inventory should be refreshed on a schedule, then set **Interval** or **Crontab**. If both are set, crontab wins.

9

Keep **Active** selected and click **Submit**. Use **Save & Continue** to create several tasks in a row.

![Figure 2: Create discover accounts task drawer](/images/v5/jumpserver/v5_admin_disc_04.png)

## Field reference

| Field                  | Description                                                                                |
| ---------------------- | ------------------------------------------------------------------------------------------ |
| **Name**               | Required. Task name.                                                                       |
| **Nodes**              | Asset nodes to scan, including subnodes.                                                   |
| **Assets**             | Individual assets to scan. Can be combined with nodes.                                     |
| **Sync to assets**     | Writes discovered accounts into the asset account list.                                    |
| **Check risk**         | Enabled by default; marks discovered accounts for risk review.                             |
| **Recipients**         | Users who receive the task report by email.                                                |
| **Periodic**           | Repeats the task on a schedule.                                                            |
| **Crontab / Interval** | Schedule definition; crontab takes priority over the interval, which defaults to 24 hours. |
| **Active**             | Enables the task.                                                                          |
| **Comment**            | Optional notes.                                                                            |

## Review and sync results

After a task runs, open the **Discovered accounts** tab and select the accounts you want to act on, then use the **More** menu:

1. **Sync selected** – create or update the matching accounts on the assets so that PAM can manage them.
2. **Sync deletion selected** – remove the account from the asset and drop the discovered record.
3. **Remove selected** – discard the discovered record only, leaving the account on the asset untouched.

Choose the deletion option carefully: it changes the remote asset, while **Remove selected** is local to the discovery list.

## Execution history

The **Execution history** tab shows each run with its trigger mode, start and end time, automation snapshot, status, and duration. Open the run to read the **Log**, or open the **Report** for asset counts, success, failed and unsupported totals, duration, and the list of newly discovered accounts.

Once accounts are synced, they appear under [Accounts](https://www.jumpserver.com/docs/features/pam/accounts.md) and on the asset's account list.