Hi, I’m running into an issue when enabling “Remove All Access” on the Inactive lifecycle state for Active Directory sources. I receive the following error related to Domain Users: ["Failed to update attribute memberOf Error occurred while setting group membership CN\u003dDomain Users,CN\u003dUse…

[image] ZCaro: Do you have this feature enabled and you don’t get these errors? Yes, I have used this few times and do not remember seeing the error you mentioned. [image] ZCaro: Do you mean one of my BR roles has the domain users entitlement added to it? Yes, this is what I meant

How to Filter Out Domain Users Entitlements on Remove All Access

Identity Security Cloud (ISC) ISC Discussion and Questions

mcheek (Mark Cheek) February 17, 2026, 11:46am 5

The “workaround” for this is to add the access you wish to keep in the access profile section of the lifecycle state

2 Likes

Topic		Replies	Views
Getting error while removing all AD groups while user offbaording ISC Discussion and Questions identity-security-cloud	5	298	July 6, 2025
How to Exclude remove entitlements from terminated team members ISC Discussion and Questions identity-security-cloud	6	113	January 14, 2026
Remove AD groups ISC Discussion and Questions	3	3278	July 19, 2023
Active directory entitlement removal ISC Discussion and Questions identity-security-cloud , lifecycle-management	4	919	December 24, 2023
NOT memberOf - does it exist ISC Discussion and Questions identity-security-cloud , connectors , entitlements	5	130	November 29, 2024

How to Filter Out Domain Users Entitlements on Remove All Access

Related topics