# Entitlemnet catalog not show all groups available

**URL:** <https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635>\
**Category:** SHF Discussion and Questions\
**Tags:** connectors, identity-security-cloud\
**Created:** [February 11, 2025, 3:34am UTC](https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635 "2025-02-11T03:34:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![JaimeIvanHuertaMontes](https://avatars.discourse-cdn.com/v4/letter/j/f475e1/32.png) [@JaimeIvanHuertaMontes](https://developer.sailpoint.com/discuss/u/JaimeIvanHuertaMontes)\
**Post date:** [February 11, 2025, 3:34am UTC](https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635/1 "2025-02-11T03:34:58Z")

</div>

Hi CoSailors.

I am having troubles to understand how entitlement aggregation works due to the following scenario that I am facing:

Connector: Google Workspace SaaS connector

1.- I ran the entitlement aggregation **without** delta aggregation enabled and got 72 groups  
2.- I ran account aggregation **without** delta aggregation enabled and got 109 accounts

Before performing the following steps I already have all the accounts and the group catalog from Google.

3.- I **enabled** delta aggregation  
4.- I ran entitlement aggregation and I got 0 because the owner didn’t create any new group or performed any modification to the groups, so in my mind the expected result is to see in SailPoint the 72 groups that I got before, however, when I go the entitlement tab in SailPoint where the 72 groups used to be, The interface now shows 0 entitlements. So I **disabled** delta aggregation and performed entitlement aggregation again and i got again the 72.

I think is wrong that SailPoint deletes all the entitlements when nothing changed with the groups.

Could anybody, please, help me to understand?

Kind regards.

---

<div class="post-metadata">

**Author:** ![j\_place](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/j_place/32/19181_2.png) [@j\_place](https://developer.sailpoint.com/discuss/u/j_place)\
**Post date:** [February 13, 2025, 10:09am UTC](https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635/2 "2025-02-13T10:09:35Z")

</div>

Hi @JaimeIvanHuertaMontes While I am definitely not an expert on Google stuff - have you double checked the scopes associated with the Service Account? FWIK, different permissions are required to query audit events (used in delta agg). Admittedly, ISC shouldn’t (IMHO) delete groups if there is a prob with permissions, but just worth checking.

---

<div class="post-metadata">

**Author:** ![JaimeIvanHuertaMontes](https://avatars.discourse-cdn.com/v4/letter/j/f475e1/32.png) [@JaimeIvanHuertaMontes](https://developer.sailpoint.com/discuss/u/JaimeIvanHuertaMontes)\
**Post date:** [February 23, 2025, 9:12pm UTC](https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635/3 "2025-02-23T21:12:49Z")

</div>

Hi Jeremy we double check the documentation and the client credentials has all the required scopes, actually the delta aggregation for accounts works fine, we still don not what is the problem.

Kind regards

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 24, 2025, 9:13pm UTC](https://developer.sailpoint.com/discuss/t/entitlemnet-catalog-not-show-all-groups-available/100635/4 "2025-04-24T21:13:23Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.