We have the same/similar issue - we want to remove ALL requested Roles after an Identity is Terminated, but because the “Manage Access” filter does NOT allow for any complex (e.g. && or ||) logic combinations, we can’t remove Birthright roles from the result we get in the “Get Access”.
(e.g. “does not start with ‘Birthright’” or role name > ‘Cxxx’ etc or filter for ROLE types, etc)
Any suggestions?
We have created some simple if=A then remove A, if=B then remove B workflows, but we can’t do this when there are 300+ possibilities!