Which IIQ version are you inquiring about?
8.4p2
During disable+leaver for SAP Process Orchestrator we are removing entitlements from the accounts. But the “Everyone” and “Authenticated Users” groups/entitlements are required on the accounts. So when the operation is submitted it fails and the account is disabled but no entitlements are removed. I tried several different takes at creating a Before Provisioning rule that would remove these groups from operations but had no success.
Does anyone have an example Before Provisioning rule that I might apply to strip entitlements from an action?