Can permissions be revoked directly without the need for user consent in the authorization process?

[sec_tech (Yoo Jaeheon)]

Continuing the discussion from When inactive, remove entitlements or access profile:

Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

I’ve been utilizing a workflow for automatic permission revocation through HTTP communication. When there are changes in user information, I initiate the revocation process via the ‘revoke’ endpoint and send an approval request.

Is it feasible to revoke permissions without necessitating explicit approval? Can permissions be revoked directly without the need for user consent in the authorization process?

When inactive, remove entitlements or access profile

Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic. When an identity is marked as inactive or terminated, I would like to request the removal of entitlements access profiles granted upon authorization. I’m currently in the workflow, so if there are any additional tasks required, please let me know so I can assist. [image] [image] [image] [image] [image] [imag…

[atarodia (Animesh Tarodia)]

Hi @sec_tech,

Yes, you can revoke the access without necessitation approval.

1. If Approval for Revoke is not set, then no approval workflow will be triggered and access will be revoked automatically.
2. If Approval for Revoke is set, then you could use list-pending-approvals | SailPoint Developer Community to list the approvals and use approve-access-request | SailPoint Developer Community to approve the request through API only.