Error in Removing Entitlement Json Body

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Everyone,

Im trying to remove entitlement “ABC” from all identities who currently have it from workflow.

Seeing Error in manage Access trigger:

{“locale”:“und”,“localeOrigin”:“REQUEST”,“text”:“Referenced RequestedFor Identity/Identities {{$.loopThroughIdentities.loopInput.identityId}} was/were not found.”},{“locale”:“en-US”,“localeOrigin”:“DEFAULT”,“text”:“Referenced RequestedFor Identity/Identities {{$.loopThroughIdentities.loopInput.identityId}} was/were not found.”}],“causes”:}",

Json Body that i’m passing :

{
“requestedFor”: [
“{{$.loopThroughIdentities.loopInput.identityId}}”
],
“requestedItems”: [
{
“type”: “ENTITLEMENT”,
“id”: “e7987bfd753f4a3481718cb895cebee2”,
“comment”: “Requesting Removal of group Test computer group”
}
],
“requestType”: “REVOKE_ACCESS”
}

2

Use `$.loopInput.identityId` instead

3

Hi @iamnithesh ,

Added the same and seeing below error.

{
“errorMessage”: “task failed: activity error (type: sp:external:http:v2, scheduledEventID: 5, startedEventID: 6, identity: 1@sp-workflow-worker-stg-us-east-1-586d6b75c-w7fnq@sp-workflow-engine): request failed (type: HTTP Response Returned a Client Error, retryable: false): request failed: 400 - 400 Bad Request - {“detailCode”:“400.1.404 Referenced object not found”,“trackingId”:“342e57b62cef4798b1d1db52a867dc1b”,“messages”:[{“locale”:“und”,“localeOrigin”:“REQUEST”,“text”:“Referenced RequestedFor Identity/Identities {{$.loopInput.identityId}} was/were not found.”},{“locale”:“en-US”,“localeOrigin”:“DEFAULT”,“text”:“Referenced RequestedFor Identity/Identities {{$.loopInput.identityId}} was/were not found.”}],“causes”:}”,
“payload”: null
},

4

Can you share the json of your workflow?

5 
$.loop.loopInput.id

$.loop.context.uid

Doesn’t matter how you name your loop the syntax will always be the same.

6

Here it is

RemoveSMTPGroup20250811 (9).json (2.7 KB)

7

Thank you @YanCoelho @iamnithesh ,

After changing the loop syntax , workflow got executed successfully with out any errors. However ,Entitlement is not removed.

RemoveSMTPGroupExecution20250811 (4).json (14.1 MB)

1 Like
8

`$.loop.loopInput.id`

9

Getting error for $.loopInput.identityId and $.loop.loopInput.id is working. However entitlement is not removing.

10

If entitlement is assigned via a Role, it will not be removed by REVOKE_ACCESS request, and the request will throw an error

11

It is direct entitlement ,We are assigning this entitlement t trigger afterModify rule

12

This workflow works.

RemoveEntitmentV220250812.json (2,0 Ko)

Parameter to replace :

  • creator with your workflow owner informations or import json with vscode
  • Get identity filter query : “@access(name:“Your entilement name”)”,
  • Replace entitlement ID with the correct one in Remove Access JSON Body