Hi all,
I have a requirement of removing entitlements from a source. The entitlements exist only in IDN, they’ve been removed from the source itself but entitlement aggregation only adds new entitlements.
Is there any other way to remove entitlements on a source other than resetting the source? Source reset is rather disruptive and will also reset access profiles (you can only skip=identities, not access profiles) which is not desirable.
One of the integrated sources seems to have followed the desired behaviour previously, but not for the past month.
The reason why this matters is that we’ve got an automated process creating access profiles 1to1 for each entitlement since access controls for the source have to be granular. If old & unused entitlements are not removed from the source, we will end up with an ever-growing list of access profiles as a result. Requesting these would end up in errors as entitlement does not exist outside of IDN.