Hi All, Issue: Birth Right Role is not working as expected via Assignment Rule. When the condition for a birthright role matches via an assignment rule, the entitlement is correctly added to the user. However, the entitlement is not being removed when the condition no longer matches the user. Th…

Hi @puppamReddy , Can you provide us with more information about whether the AD provisioning of these memberships has been performed, if it has failed, or if it simply hasn’t been executed?

Hi @puppamReddy , Can you check the configuration in the Global Setting and see what the setting for below snapshot is. [image] Thanks

it’s not been executed. I do not see any provisioning transaction for role removal.

Within the Administrator Console, there should be a provisioning process for the application and the account for which you attempted to revoke membership. It should have the following characteristics: [image]

Yes, I have checked, but I did not find any provisioning transactions related to the removal of this role.

Did you check the xmls for the identity which is not working compared to which is working ? most the role assignment / entitlement assignment .

Just now I checked below observations Working user have Business role and It role Under roleAssignments tag business role souce=Rule RoleDetection tag I do see assignmentIds Not working User 1.Only IT Role Under RoleDetection tag 2. RoleDetection tag I do not see assignmentIds

@puppamReddy Besides all the above replies, can you also confirm that the group, whatever it is in the IT role, should not be requested manually by manager user access before, right?

If that is the case, I don’t think it will be removed because the manual request will come first priority and won’t remove the group from the user when the role is unassigned. The group will be removed only if you do remove requests from manage user access only.

Entitlements Are Not Being Removed When a Business Role Is Auto Unassigned via an Assignment Rule

IdentityIQ (IIQ) IIQ Discussion and Questions

puppamReddy (Puppam Reddy) September 17, 2024, 5:07pm 7

Topic		Replies	Views
Business role removed but Entitlement still existing IIQ Discussion and Questions identityiq , provisioning , roles	8	70	April 18, 2026
IT role and entitlements stay back after the Business role is removed as per the criteria IIQ Discussion and Questions apis , rules , identityiq , provisioning , connectors , entitlements	15	127	May 20, 2026
Removed the business role assignment rule but still have the IT role IIQ Discussion and Questions rules , identityiq , entitlements	4	168	December 27, 2025
Revoke Assignment not deleting entitlements ISC Discussion and Questions identity-security-cloud	8	114	March 27, 2026
Assigned Roles via Assignment Rules Not Removed Until Refresh Task with Specific Options IIQ Community Knowledge Base identityiq , provisioning	0	123	August 5, 2025

Entitlements Are Not Being Removed When a Business Role Is Auto Unassigned via an Assignment Rule

Related topics