# Entitlement with assigned identities is not available when creating a certification campaign

**URL:** <https://developer.sailpoint.com/discuss/t/entitlement-with-assigned-identities-is-not-available-when-creating-a-certification-campaign/217670>\
**Category:** SHF Discussion and Questions\
**Tags:** isc-questions-and-answers, identity-security-cloud, certifications\
**Created:** [July 29, 2026, 9:07pm UTC](https://developer.sailpoint.com/discuss/t/entitlement-with-assigned-identities-is-not-available-when-creating-a-certification-campaign/217670 "2026-07-29T21:07:41Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [July 30, 2026, 8:05am UTC](https://developer.sailpoint.com/discuss/t/entitlement-with-assigned-identities-is-not-available-when-creating-a-certification-campaign/217670/2 "2026-07-30T08:05:52Z")

</div>

Hello Maria. The Entitlements tab in your campaign builder is showing exactly 10,000 results, and that’s the cap. The [campaign creation UI](https://documentation.sailpoint.com/saas/help/certs/starting_search_campaign.html) only loads a maximum of 10,000 access items when you use Refine Access. The search box on that screen filters within those 10,000, not across your full entitlement set. Since `GG_CCWF_ADM-FLUJO_PROD` falls outside that first batch, it won’t show up no matter what you type. This is a [known limitation](https://developer.sailpoint.com/discuss/t/search-certification-configuration-doesnt-show-all-access-available/30309) in the campaign builder UI.

To get around this, you can create an Access Items campaign instead and choose “All Access Items Returned by a Query” rather than the manual picker. A query like `name:"GG_CCWF_ADM-FLUJO_PROD"` targets the entitlement directly and bypasses the 10k cap. From there, select “Certify This Access” and then “Certify All Identities.”

ISC only includes identities that hold the entitlement as [standalone access](https://documentation.sailpoint.com/saas/help/certs/understanding_certifications.html). If the two identities received it through an access profile or role, that access profile or role needs to be selected for certification instead. You can verify by opening one of the identities’ access details and checking whether the entitlement sits on its own or under an access profile.

---

_[View the full topic](https://developer.sailpoint.com/discuss/t/entitlement-with-assigned-identities-is-not-available-when-creating-a-certification-campaign/217670)._
