# Filter Access in Certification from Workflow

**URL:** <https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, workflows\
**Created:** [June 7, 2023, 10:14am UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064 "2023-06-07T10:14:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [June 7, 2023, 10:14am UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064/1 "2023-06-07T10:14:10Z")

</div>

Heya!

We have a workflow that Creates and Activated a certificaton campaign whenever an identity changes department. However, we would like to filter on the access that is being certified on. Is this possible somehow? For example if it would be possible to firstly retieve only access-profiles and roles for the identity to be certified via a “Get Access” action, and then link this one to the “Create Certification Campaign” action?

![image](https://global.discourse-cdn.com/sailpoint/original/2X/7/773c5993fb8a92789faf8b29407e8a869a4cf78b.png)

Appreciate all answers, thank you.

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [June 7, 2023, 12:57pm UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064/2 "2023-06-07T12:57:50Z")

</div>

Hi Sebastian,

Please try setting certification type to “Access Certification” and then providing an “Access Filter” to specify the profiles you want to include in the certification. This may help address your use case in a simple way.

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [June 7, 2023, 1:01pm UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064/3 "2023-06-07T13:01:08Z")

</div>

Hello Sharvari, thanks for responding!

It seems like selecting “Access Request” includes all access for all identities whereas in our case, we need to only certify access for 1 identity and filter on this identity’s access.

So an identity certification but where we’re able to exclude for example entitlements from that certification.

---

<div class="post-metadata">

**Author:** ![sharvari](https://avatars.discourse-cdn.com/v4/letter/s/3be4f8/32.png) [@sharvari](https://developer.sailpoint.com/discuss/u/sharvari)\
**Post date:** [June 7, 2023, 1:29pm UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064/4 "2023-06-07T13:29:20Z")

</div>

You may have to go with using Identity Certification in that case without any filtering option available for access.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/9/9eb70885a4012987f73260cff3c9007218b82a5e.png)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 6, 2023, 1:29pm UTC](https://developer.sailpoint.com/discuss/t/filter-access-in-certification-from-workflow/12064/5 "2023-08-06T13:29:36Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.