how do we extract the report of users who has been removed from a set of Entitlements from a set period
Hi Sekar,
You can view the results through Admin–> Identity Management–> Access History from the above you can only review the access provisioning/de-provisioning.
But if you want to download the report you have to build a query for the same.
FYI find the provided link for your reference : - Building a Search Query - SailPoint Identity Services
IHTH ![]()
Hi @pkMishra ,
I am unable to see the group name which is being requested in the column chooser as per the search query used as per your link.
Regards,
Venkat
What’s the query you are hitting to get the end result?
Hi @pkMishra ,
I am using the below search query in UI:
operation:“REMOVE” AND status:“PASSED” AND NOT attributes.interface:“Identity Refresh” AND NOT (attributes.sourceName:“Azure Active Directory” AND attributes.sourceName:“Terminate-") AND (attributes.attributeValue:"CN=CON-APP-Argus-” OR attributes.attributeValue:“CN=CON-APP-QA-Argus*” OR attributes.attributeValue:“CN=CON-APP-TRN-Argus-" OR attributes.attributeValue:"CN=CON-APP-EDNA-” OR attributes.attributeValue:“CN=CON-APP-Gateway*” OR attributes.attributeValue:“CN=CON-APP-Analytics*” OR attributes.attributeValue:“CN=CON-APP-QA-Analytics*” OR attributes.attributeValue:“CN=CON-APP-ARCCMT*” OR attributes.attributeValue:“CN=CON-APP-Dev-SLT*” OR attributes.attributeValue:“CN=CON-APP-QA-SLT-" OR attributes.attributeValue:"CN=CON-APP-SLT-” OR attributes.attributeValue:“CN=CON-APP-TRN-Analytics*” OR attributes.attributeValue:“CN=CON-APP-ARCCMT-" OR attributes.attributeValue:"CN=CON-APP-DEV-Empirica-” OR attributes.attributeValue:“CN=CON-APP-DEV-SAFIREEMPIRICA-" OR attributes.attributeValue:"CN=CON-APP-Empirica”)
The accountName and attributeValue are not available in the column chooser in search area
use access-request-status api to get done