Hi Experts I have a peculiar use case where I have different type of entitlements of a web service application ( doesn’t matter how many types here actually) , from the web service we get the information of entitlements user have and each entitlement assignment has its own start date and end date a…

Hi Satish, Can you do something like below, I am not sure weather this is ideal solution, but you can try it. 1. Create an extended attribute on a link like "entitlementExpiryData" 2. write a customisation rule. Below is something you can try in your customisation rule. // Process each en…

[image] naveenkumar3: entitlementExpiryData @naveenkumar3 Are you saying extended attribute having a map? If so how would I read or use that data for comparison with current date because we will have 100k users as mentioned , we cannot iterate through each link.

[image] Satish Kurasala: Are you saying extended attribute having a map? If so how would I read or use that data for comparison with current date because we will have 100k users as mentioned , we cannot iterate through each link. The extended attribute “entitlementExpiryData” is defined as a m…

@naveenkumar3 Thanks for responding, I am not talking about iterating the accounts during aggregation, once you have the data in IIQ, if we have send notifications, we have to iterate through all link objects and within that read the data for each of this entitlement access, as I said we have more …

I thought You are talking about aggregation, that’s why I mentioned Pagination. The solutions, which I mentioned is creating a notification task, for checking expiring entitlements. No you do not to iterate over 100k link objects. Give me sometime, i will tell you how you can do that.

okay, I hope now you understand the tricky part here, sure please keep me posted if you find anything

[image] Satish Kurasala: f we have send notifications, we have to iterate through all link objects and within that read the data for each of this entitlement access, as I said we have more than 100k+ accounts Yeah, I have give a thought, but I think if you want to send the notification, about…

Hi @iamksatish , once try this below rule import sailpoint.object.Filter; import sailpoint.object.QueryOptions; import sailpoint.object.Identity; import sailpoint.object.IdentityEntitlement; import sailpoint.object.EmailTemplate; import sailpoint.object.EmailOptions; import java.util.…

@Harikrishna_06 How are you going to populate the end date within Identity Entitlement table for entitlements which are updated in target already?

Hi @iamksatish , When we set sunset date, then it automatically creates endDate attribute in identityEntitlement table. once check below images [image] <IdentityEntitlement aggregationState="Connected" assigned="true" assigner="The Administrator" assignmentId="7ea75268a2544627b3ff5b572acd3834" cr…

How to manage start and end dates of entitlements assignments coming from aggregation

IdentityIQ (IIQ) IIQ Discussion and Questions

iamksatish (Satish Kurasala) October 1, 2025, 12:07pm 14

@Harikrishna_06

In what format you wanted to store for each entitlement assignment and in which attribute, Because we are looking a way for not to iterate all the links in system for app considering 100k+ accounts.

Topic		Replies	Views
Enhancement: Expiration dates in entitlement requests Product News	17	1116	August 14, 2024
Is there a search query to get all the identities whose entitlement access is going to expire in certain date range? ISC Discussion and Questions identity-security-cloud , search , access	9	556	January 21, 2025
Scheduling Entitlement Aggregation API ISC Discussion and Questions apis , aggregation , identity-security-cloud , entitlements	2	611	July 19, 2023
Entitlement Validity Period Connectivity Documentation Feedback va-con-docs	3	69	February 17, 2025
How to add expiry date to Entitlement IIQ Discussion and Questions identityiq , entitlements	1	44	June 28, 2025

How to manage start and end dates of entitlements assignments coming from aggregation

Related topics