# Manual entitlement revoke

**URL:** <https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643>\
**Category:** SHF Discussion and Questions\
**Tags:** access-requests, identity-security-cloud\
**Created:** [September 14, 2023, 8:05pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643 "2023-09-14T20:05:14Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [September 14, 2023, 8:05pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/1 "2023-09-14T20:05:14Z")

</div>

Hi, I am looking for a workaround about entitlement revokes. The need is for have something like the Request Center, but for revoking. That is because at the initial phase, client wants to add and revoke entitlements from IDN, and lefting other layers like aprovals, roles or certifications for next phases.

I were looking for forms, is viable to do something like this using them, in conjuntion with worflows and the entitlement revoke API? Does anyone had a demand like this before?

---

<div class="post-metadata">

**Author:** ![alexandre\_mazars](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/alexandre_mazars/32/2860_2.png) [@alexandre\_mazars](https://developer.sailpoint.com/discuss/u/alexandre_mazars)\
**Post date:** [September 15, 2023, 7:21am UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/2 "2023-09-15T07:21:15Z")

</div>

Hello,

Manager have the possibility to ask for the removal of Access Profile from “My Team” page. This request will then be visible in “My request” page in the request center with “Delete :”.

These request are configured using the Access Profile configuration regarding workflows, exactly like for the request to gain access 😉

Hope it will help !

---

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [October 9, 2023, 1:31pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/3 "2023-10-09T13:31:25Z")

</div>

Hi @alexandre_mazars ! Thanks for the response. The problem of manager asking removal is that he only can ask for roles or access profiles. We are being claimed the need to remove individual entitlements 🫠

---

<div class="post-metadata">

**Author:** ![alexandre\_mazars](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/alexandre_mazars/32/2860_2.png) [@alexandre\_mazars](https://developer.sailpoint.com/discuss/u/alexandre_mazars)\
**Post date:** [October 9, 2023, 2:19pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/4 "2023-10-09T14:19:35Z")

</div>

Hello @jsosa,

Yes i know it…we also have some difficulties with this and the fact that we are missing the possibility for an admin or a security officier to ask for this removal in IdentityNow…

If you’re finding a solution, i’ll be interrested in having it 😉

---

<div class="post-metadata">

**Author:** ![gauravsajwan1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/gauravsajwan1/32/7856_2.png) [@gauravsajwan1](https://developer.sailpoint.com/discuss/u/gauravsajwan1)\
**Post date:** [October 9, 2023, 5:20pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/5 "2023-10-09T17:20:29Z")

</div>

Hello @jsosa , I believe forms are currently not available in Request Center (though it’s an upcoming feature - not sure about timeline though). When it comes, as you said, you can use it as a start point and then attach it to a workflow to handle the entitlement revocation.

Another solution could be, might be time consuming but worth trying if it fits your timeline, wherein you configure an external request form outside IDN (like in ServiceNow) and let that external request form call IDN Access Request APIs for entitlement revocation.  
Since you have full control in customizing form, you can make it as user friendly as possible.

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/6/60513274a3311ef4c2a6791d8c8bc562e93d971d.png)

> **[create-access-request | SailPoint Developer Community](https://developer.sailpoint.com/idn/api/v3/create-access-request)**
>
> Submit an Access Request

HTH!

---

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [October 9, 2023, 5:55pm UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/6 "2023-10-09T17:55:46Z")

</div>

Hi @gauravsajwan1 thanks for response!

We had a session with Sailpoint and it is actual threated as an idea. I just received an email that it passed to discovery status.

[https://ideas.sailpoint.com/ideas/GOV-I-1646](https://ideas.sailpoint.com/ideas/GOV-I-1646)

---

<div class="post-metadata">

**Author:** ![gauravsajwan1](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/gauravsajwan1/32/7856_2.png) [@gauravsajwan1](https://developer.sailpoint.com/discuss/u/gauravsajwan1)\
**Post date:** [October 10, 2023, 3:25am UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/7 "2023-10-10T03:25:03Z")

</div>

That is right. I cannot recall where I saw or heard this, but forms availability on Request Center has been requested by most customers so I believe it will be coming up soon (again not sure on timeline).

You may ask your CSM for the same, the more push from customers will help it bring up! 🙂

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [December 9, 2023, 3:25am UTC](https://developer.sailpoint.com/discuss/t/manual-entitlement-revoke/17643/8 "2023-12-09T03:25:54Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
