Deprovisioning Logs

Mahak14 · December 7, 2022, 10:11am

Hi Team,

Is there way to identify what birthright roles are removed on deprovisioning.

Thanks,
Mahak Garg

sharvari · April 17, 2023, 7:14am

The Identity Now events for deprovisioning will only list the actual entitlements being removed from target system, it doesn’t specify the role name being removed.

To find out role name being deprovisioned for a user: Use the Account Activity in Search, it will list the role name being removed in the Attribute Request section once you select the deprovisioning account activity for the user.
Ex.
Remove assignedRoles:

Topic		Replies	Views
Do not deprovision access when removing Role ISC Discussion and Questions rules , identity-security-cloud , roles , entitlements	2	781	July 19, 2023
Best Practices: Updating Roles Already Assigned to Users (Removing Entitlements) ISC Discussion and Questions apis , identity-security-cloud , provisioning , roles , access-profiles	5	243	March 5, 2024
Single Valued Entitlement Issue ISC Discussion and Questions entitlements	9	661	July 19, 2023
Role Bases Access checks and balances ISC Discussion and Questions identity-security-cloud , roles , entitlements	9	385	December 3, 2023
Removing roles in identity now ISC Discussion and Questions identity-security-cloud	4	447	August 4, 2023

Deprovisioning Logs

Related Topics