# How can we retrieve historical identity entitlement additions and removals through Data Share or API?

**URL:** <https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, identityiq\
**Created:** [August 18, 2026, 7:47pm UTC](https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526 "2026-08-18T19:47:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vstouba](https://avatars.discourse-cdn.com/v4/letter/v/b38774/32.png) [@vstouba](https://developer.sailpoint.com/discuss/u/vstouba)\
**Post date:** [August 18, 2026, 7:47pm UTC](https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526/1 "2026-08-18T19:47:40Z")

</div>

Hello all, I use SailPoint Data Share in Snowflake to report identity entitlements. The available identity-entitlement relationship appears to contain only the current state; when access is removed, the relationship disappears.

The Identity History UI shows entitlement additions and removals, but we cannot find the corresponding Data Share table or API.

Is there a supported API, Data Share table, or audit-event type for retrieving historical entitlement grant and removal events, including identity, entitlement, source, action, and timestamp? Can this information be queried incrementally, and what is its retention period?

If this history is not available, is storing periodic snapshots and calculating deltas the recommended approach?

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [August 19, 2026, 6:18am UTC](https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526/2 "2026-08-19T06:18:13Z")

</div>

Welcome to the Developer Community, Valery.

For Data Share, `ACCOUNT_ENTITLEMENTS.DELETED_DATE` can be used to identify when an account-entitlement relationship was removed. However, the table does not expose an equivalent grant timestamp, and `IDENTITY_HISTORY_EVENTS` is documented for identity attribute changes rather than entitlement add/remove history. ([SDS data dictionary](https://developer.sailpoint.com/docs/reporting/sds-identity-data-dictionary))

For the actual access history, I would suggest the Identity History API: `GET /historical-identities/v1/{id}/events`, filtered with `accessItemTypes=entitlement` and `AccessAddedEvent` / `AccessRemovedEvent`. It is experimental and works per identity. ([Identity History](https://developer.sailpoint.com/docs/tools/sdk/typescript/identity_history/methods/identity-history))

SailPoint also documents [`AddEntitlement` and `RemoveEntitlement` audit events](https://developer.sailpoint.com/docs/guides/audit-events-reference/), which you can query in Search. Audit events are retained for [one year plus the current month](https://documentation.sailpoint.com/saas/help/common/audit-reports.html), with older data available up to five years through an Audit History Request Form, so that may also be worth evaluating for the reporting requirement.

---

<div class="post-metadata">

**Author:** ![vstouba](https://avatars.discourse-cdn.com/v4/letter/v/b38774/32.png) [@vstouba](https://developer.sailpoint.com/discuss/u/vstouba)\
**Post date:** [August 26, 2026, 7:56am UTC](https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526/3 "2026-08-26T07:56:17Z")

</div>

Harish, thank you for the help!

---

<div class="post-metadata">

**Author:** ![Deepak\_Chaudhary](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/deepak_chaudhary/32/34380_2.png) [@Deepak\_Chaudhary](https://developer.sailpoint.com/discuss/u/Deepak_Chaudhary)\
**Post date:** [August 26, 2026, 8:51am UTC](https://developer.sailpoint.com/discuss/t/how-can-we-retrieve-historical-identity-entitlement-additions-and-removals-through-data-share-or-api/219526/4 "2026-08-26T08:51:30Z")

</div>

HI @vstouba,

This seems to be possible to track the historical entitlements/groups addition and removals using Cloud Audit logs. This could be achieved with the help of Data share and the standard APIs. And the same has been explained by Harish. Hope this helps .