# ISC: Removal of entitlements

**URL:** <https://developer.sailpoint.com/discuss/t/isc-removal-of-entitlements/89972>\
**Category:** Bugs\
**Tags:** entitlements, sailpoint-identity-security\
**Created:** [November 18, 2024, 9:19am UTC](https://developer.sailpoint.com/discuss/t/isc-removal-of-entitlements/89972 "2024-11-18T09:19:11Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![adamian](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@adamian](https://developer.sailpoint.com/discuss/u/adamian)\
**Post date:** [November 18, 2024, 9:19am UTC](https://developer.sailpoint.com/discuss/t/isc-removal-of-entitlements/89972/1 "2024-11-18T09:19:12Z")

</div>

# What problem are you observing?

On the Access Model » Entitlements » Entitlement X » Identities ISC tries to offer the possibility for an admin to remove an entitlement from an identity.

After you click the “Revoke” button, you have to enter a comment:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/e/2/e2426b02df290483f3b7ae9ec773fea15c50df58.png)

After you confirm the removal you are greeted with an error:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/7/9/792afff938868fe1d51d203baac5aa244f0e4354.png)

# What is the correct behavior?

One or more of these options:

- Show what went wrong, the customer was not impressed with this generic error message. The message says “contact the administrator”, but the org admins are generally performing the actions.

- If the revocation is not allowed, don’t display/offer the revoke button

- Don’t expect Admins to constantly use the Developer tools in the browser to understand what happens behind the curtains:  

- Separate the admin “access **removal** ”, from user “access **request** ”. Why does we have to enable the request in order to remove an entitlement?  

- Offer the removal functionality on Entitlements request page for each identity as well.  

# What product feature is this related to?

ISC

# What are the steps to reproduce the issue?

- Don’t select “Enable Entitlement Requests”
- Go to an entitlement on the entitlements page
- Try to revoke the entitlement for an identity
- Try to understand the generic error message

# Do you have any other information about your environment that may help?

N/a