Google Workspace Groups Removal on Disable

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

The requirement is to remove all the group memberships for Google Workspace upon LCS Inactive state. I have used the services standard Before Provisioning Rule and updated it to reflect the below:

`"eventActions": [
{
"Action": "RemoveEntitlements",
"Attribute": "Groups",
"Value": null
},
{
"Action": "RemoveEntitlements",
"Attribute": "Role",
"Value": null
}
],`

I even tried using various Attribute options

{
"Action": "RemoveEntitlements",
"Attribute": "memberOf",
"Value": null
}

Can I use standard rule to remove google groups? Do I have to write custom Before Provisioning rule to handle this scenario?
Any help or guidance is appreciated

Thanks,
Sandhya

2

Recived confirmation from SailPoint Connector team that SAAS connectors does not support TWO commands together to be executed, hence this use case would not be achievable. when the standard BP rule is configured to Disable account AND remove groups under same provisioning plan, it can only disable the account.

We have achieved the same through a workflow. Followed this post