# Certification Automatic Revocation - Missing Groups from provisioning request

**URL:** <https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, provisioning, certifications\
**Created:** [June 22, 2026, 3:47pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370 "2026-06-22T15:47:45Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![tmamouros](https://avatars.discourse-cdn.com/v4/letter/t/ce73a5/32.png) [@tmamouros](https://developer.sailpoint.com/discuss/u/tmamouros)\
**Post date:** [June 22, 2026, 3:47pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/1 "2026-06-22T15:47:46Z")

</div>

## Which IIQ version are you inquiring about?

8.4

## Share all details about your problem, including any error messages you may have received.

We were validating the revoking process from our certifications and one case stood out.

The Certification “Targeted Access Review for User2” had 16 entitlements being certificated for User1, all from the same application.

User2 revoked all of these accesses. The provisioning request was created, but only for 14 of the 16 accesses.

I can’t find any errors. These groups just seem to not be included.

Any ideas on how to go about trying to understand this issue would be appreciated.

Thanks

---

<div class="post-metadata">

**Author:** ![santhirajumunganda](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/santhirajumunganda/32/38035_2.png) [@santhirajumunganda](https://developer.sailpoint.com/discuss/u/santhirajumunganda)\
**Post date:** [June 22, 2026, 4:17pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/2 "2026-06-22T16:17:57Z")

</div>

Did you check if there are any duplicate entitlements/access items? Sometimes IIQ consolidates duplicates in the provisioning plan, so you may see fewer items there than in the certification.

---

<div class="post-metadata">

**Author:** ![r\_pragati](https://avatars.discourse-cdn.com/v4/letter/r/41988e/32.png) [@r\_pragati](https://developer.sailpoint.com/discuss/u/r_pragati)\
**Post date:** [June 22, 2026, 6:01pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/3 "2026-06-22T18:01:36Z")

</div>

@tmamouros If I understand correctly, all 16 accesses were removed, but you can still see a provisioning request for 14 of the 16 accesses. Could you please check whether the user has any duplicate access assignments?

---

<div class="post-metadata">

**Author:** ![kallajayaram](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kallajayaram/32/35609_2.png) [@kallajayaram](https://developer.sailpoint.com/discuss/u/kallajayaram)\
**Post date:** [June 25, 2026, 4:53pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/4 "2026-06-25T16:53:03Z")

</div>

Hi @tmamouros

For the 2 missing entitlements, verify whether they are marked as Non-Requestable, inherited through a birthright or role-based access, or if they were filtered out by any provisioning policy or customization rule

---

<div class="post-metadata">

**Author:** ![santhirajumunganda](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/santhirajumunganda/32/38035_2.png) [@santhirajumunganda](https://developer.sailpoint.com/discuss/u/santhirajumunganda)\
**Post date:** [June 26, 2026, 10:45am UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/5 "2026-06-26T10:45:49Z")

</div>

Hi, were you able to find the cause of the missing entitlements?

---

<div class="post-metadata">

**Author:** ![neel193](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/neel193/32/34038_2.png) [@neel193](https://developer.sailpoint.com/discuss/u/neel193)\
**Post date:** [June 26, 2026, 12:47pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/6 "2026-06-26T12:47:21Z")

</div>

@tmamouros Please check if those 2 entitlements got filtered out and it should tell you the reason. Is it happening for all users and with all certification or just for a specific ones.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 25, 2026, 12:47pm UTC](https://developer.sailpoint.com/discuss/t/certification-automatic-revocation-missing-groups-from-provisioning-request/214370/7 "2026-08-25T12:47:33Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
