Deprovisioning Logs

Hi Team,

Is there way to identify what birthright roles are removed on deprovisioning.

Mahak Garg

The Identity Now events for deprovisioning will only list the actual entitlements being removed from target system, it doesn’t specify the role name being removed.

To find out role name being deprovisioned for a user: Use the Account Activity in Search, it will list the role name being removed in the Attribute Request section once you select the deprovisioning account activity for the user.
Remove assignedRoles: