# Does IDN allow to making access profile non Requestable?

**URL:** <https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968>\
**Category:** SHF Discussion and Questions\
**Tags:** access-profiles, identity-security-cloud\
**Created:** [June 22, 2023, 2:08pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968 "2023-06-22T14:08:41Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 22, 2023, 2:08pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/1 "2023-06-22T14:08:41Z")

</div>

I do see an API but it is giving 400 Bad request.

---

<div class="post-metadata">

**Author:** ![IAMpdu](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iampdu/32/2671_2.png) [@IAMpdu](https://developer.sailpoint.com/discuss/u/IAMpdu)\
**Post date:** [June 22, 2023, 2:09pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/2 "2023-06-22T14:09:28Z")

</div>

Can you share the request body?

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 22, 2023, 2:09pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/3 "2023-06-22T14:09:53Z")

</div>

```auto
[
  {
    "op": "replace",
    "path": "/requestable",
    "value": false
  }
]

```

---

<div class="post-metadata">

**Author:** ![antony\_petson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/antony_petson/32/2697_2.png) [@antony\_petson](https://developer.sailpoint.com/discuss/u/antony_petson)\
**Post date:** [June 22, 2023, 2:17pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/4 "2023-06-22T14:17:57Z")

</div>

Hey @RAKGDS  
Were you able to find the option at least from UI ? Looks like new RC has something that needs to be enabled from backend to rollout all features?  
Also, were you able to find the requestable access profiles within new Request Center?  
I am facing both the issues.

```auto
Response:
            "text": "Read only field \"requestable\" has a default value \"true\", it cannot be set or modified."

```

Thanks,  
Antony

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [June 22, 2023, 2:18pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/5 "2023-06-22T14:18:11Z")

</div>

Have you tried with Content-type : application/json-patch+json in the header?

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 22, 2023, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/6 "2023-06-22T14:22:00Z")

</div>

Hi Antony,

From UI we are able to make it non Requestable. But not using api

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 22, 2023, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/7 "2023-06-22T14:22:12Z")

</div>

Yes Nithesh this is tried

---

<div class="post-metadata">

**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\
**Post date:** [June 22, 2023, 6:31pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/9 "2023-06-22T18:31:40Z")

</div>

> [@RAKGDS](#):
>
> `/requestable`

I see a similar thread for the same issue, [Patch access profile “requestable” field - IdentityNow (IDN) / Discussion and Questions - SailPoint Developer Community Forum](https://developer.sailpoint.com/discuss/t/patch-access-profile-requestable-field/1697/4)

and I don’t see any resolution for it. @colin_mckibben is this functionality available via API?

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [June 23, 2023, 6:48am UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/10 "2023-06-23T06:48:17Z")

</div>

I’ve been triggered by this request to figure out what the API behind the setting in the UI is. However, it is currently running into an issue for me; I can’t disable the ‘Access Request’ flag in an access profile. Maybe this is caused by the the same issue in the API?

I’ll make a support ticket for this UI issue and see from there.

---

<div class="post-metadata">

**Author:** ![mostafa\_helmy](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@mostafa\_helmy](https://developer.sailpoint.com/discuss/u/mostafa_helmy)\
**Post date:** [June 23, 2023, 12:09pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/11 "2023-06-23T12:09:46Z")

</div>

Using the new Access Request Center UI, Access Profiles are made requestable through Applications. You would create an Application from the same Source as your Access Profiles, add whichever relevant Access Profiles and enable that Application for Access Requests.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/1/15e2397df602de6107c68cd852d0903543f9c99d.png)  
 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/e/ec23883c3a4afdbd8a43ac61cd846defd2a6c79c.png)

---

<div class="post-metadata">

**Author:** ![mostafa\_helmy](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@mostafa\_helmy](https://developer.sailpoint.com/discuss/u/mostafa_helmy)\
**Post date:** [June 23, 2023, 12:12pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/12 "2023-06-23T12:12:51Z")

</div>

The end user experience would look like this:

![image](https://global.discourse-cdn.com/sailpoint/original/2X/6/6a6c898600fa07e53ad978da7bf78d70ab1d71d2.png)

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/0/0671a11b384cbba61ba24b1fd78c9514805de734.png)

---

<div class="post-metadata">

**Author:** ![anneragh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/anneragh/32/8934_2.png) [@anneragh](https://developer.sailpoint.com/discuss/u/anneragh)\
**Post date:** [June 23, 2023, 12:23pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/13 "2023-06-23T12:23:23Z")

</div>

PATCH: https://{tenant}/beta/access-profiles/:id method with the option requestable is confusing. Ideally, access profile are requestable objects.

However, we can play with another attribute “enable” to hide or show the access profiles.

Payload: {op: “replace”, path: “/enabled”, value: true}

---

<div class="post-metadata">

**Author:** ![antony\_petson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/antony_petson/32/2697_2.png) [@antony\_petson](https://developer.sailpoint.com/discuss/u/antony_petson)\
**Post date:** [June 23, 2023, 12:37pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/14 "2023-06-23T12:37:33Z")

</div>

Thanks for responding, Mostafa.  
Does that mean we have to create applications for all the sources which needs its Access Profile to be requestable ?  
Also, only cc API works to make it requestable by adding the profiles to application?  
`{{baseUrl}}/cc/api/app/update/:applicationId`  
`Body: {"accessProfileIds": ["profile1Id", "profile2Id"]}`

---

<div class="post-metadata">

**Author:** ![iamnithesh](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamnithesh/32/42445_2.png) [@iamnithesh](https://developer.sailpoint.com/discuss/u/iamnithesh)\
**Post date:** [June 23, 2023, 12:54pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/15 "2023-06-23T12:54:55Z")

</div>

Access Profiles are not available “directly” in the Request Center. Instead you need to choose them from inside Applications. So, Access Profiles have to be either inside an Application or a Role to be requested from the Request Center

---

<div class="post-metadata">

**Author:** ![mostafa\_helmy](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@mostafa\_helmy](https://developer.sailpoint.com/discuss/u/mostafa_helmy)\
**Post date:** [June 23, 2023, 1:06pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/16 "2023-06-23T13:06:02Z")

</div>

Correct and correct.

You have to create one or more Application per Source to be able to directly request Access Profiles from that Source. There are no /v3 or /beta APIs to manage Application objects. I believe the /cc/api/app/update/:applicationId is the only way to do this programmatically.

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 26, 2023, 2:48pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/17 "2023-06-26T14:48:05Z")

</div>

Hi Mostafa,

Thank you for the reply. We need to make sure that Access Profile is not visible in Service - Now Catalogue. Our client does not want to have any access profile requestable that is where we have this ask.

Could you please let us know if we can make Access Profile non requestable and not have it Service Now Catalogue ?

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/8/8dde2e32c3f7d88b77486264328e69d5d02e8d4b.png)

If you see the screen there are many access profile which are visible and not allowing us for making it disable.

Thanks  
Rakesh Bhati

---

<div class="post-metadata">

**Author:** ![mostafa\_helmy](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@mostafa\_helmy](https://developer.sailpoint.com/discuss/u/mostafa_helmy)\
**Post date:** [June 26, 2023, 2:59pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/18 "2023-06-26T14:59:52Z")

</div>

As far as I understand, you probably have these two options:

1. Disable the Access Profile on IdentityNow. I’m not sure how that would impact this Access Profile if it is part of other Roles, so I would advice you check the impact first.
2. Configure a search filter on the ServiceNow-side Service Catalogue Application to exclude these Access Profiles. You have the option to add an _Additional query for fetching list of access profiles_ (ref docs: [Configuring ServiceNow for Integration](https://documentation.sailpoint.com/connectors/servicenow/service_catalog/help/integrating_service_catalog/configuring_servicenow.html)). You could configure a naming convention for such Access Profiles to start with a specific text (Non-Requestable, NR, etc) and use that as your filter.

---

<div class="post-metadata">

**Author:** ![RAKGDS](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/rakgds/32/2795_2.png) [@RAKGDS](https://developer.sailpoint.com/discuss/u/RAKGDS)\
**Post date:** [June 26, 2023, 3:08pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/19 "2023-06-26T15:08:37Z")

</div>

Thank you so much Mostafa for your quick reply. We also have this recommendation popping up which client does not want in ServiceNow - Catalogue.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/b/b88b5f27398f3bd8b9ec2c71a6232539d3815a7c.png)

Do you have any recommendations for removing that ?

Thanks  
Rakesh Bhati

---

<div class="post-metadata">

**Author:** ![mostafa\_helmy](https://avatars.discourse-cdn.com/v4/letter/m/439d5e/32.png) [@mostafa\_helmy](https://developer.sailpoint.com/discuss/u/mostafa_helmy)\
**Post date:** [June 26, 2023, 3:44pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/20 "2023-06-26T15:44:17Z")

</div>

I don’t think there is a way to remove it since it is based on the AI Recommendations generated for the requestor. Might be worth asking in a separate thread to see if anyone else has an idea.

---

<div class="post-metadata">

**Author:** ![questjj](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/questjj/32/25216_2.png) [@questjj](https://developer.sailpoint.com/discuss/u/questjj)\
**Post date:** [June 26, 2023, 4:01pm UTC](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968/21 "2023-06-26T16:01:51Z")

</div>

I also ran into this, instead of renaming the access profiles, I added a tag in the description of #notrequestable and filtered on that on the servicenow side.

[Next page](https://developer.sailpoint.com/discuss/t/does-idn-allow-to-making-access-profile-non-requestable/12968.md?page=2)
