# Prevent SailPoint from Removing RACF Default Group

**URL:** <https://developer.sailpoint.com/discuss/t/prevent-sailpoint-from-removing-racf-default-group/207470>\
**Category:** SHF Discussion and Questions\
**Tags:** isc-questions-and-answers, sailpoint-identity-security, provisioning\
**Created:** [May 11, 2026, 5:47pm UTC](https://developer.sailpoint.com/discuss/t/prevent-sailpoint-from-removing-racf-default-group/207470 "2026-05-11T17:47:30Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![ryan\_toornburg](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ryan_toornburg/32/21550_2.png) [@ryan\_toornburg](https://developer.sailpoint.com/discuss/u/ryan_toornburg)\
**Post date:** [May 11, 2026, 6:48pm UTC](https://developer.sailpoint.com/discuss/t/prevent-sailpoint-from-removing-racf-default-group/207470/6 "2026-05-11T18:48:36Z")

</div>

@lucassilvaasper there is another option like @pradeep1602 mentioned. You can have SP deploy a “One size fits most” rule that is managed with a JSON config file on your tenant. [ISC Sample BeforeProvisioning Rule](https://developer.sailpoint.com/discuss/t/isc-sample-beforeprovisioning-rule/192652)  
Original pdf - [https://global.discourse-cdn.com/sailpoint/original/2X/8/8939f8dddee417ecf55262549102a40748115e1a.pdf](https://global.discourse-cdn.com/sailpoint/original/2X/8/8939f8dddee417ecf55262549102a40748115e1a.pdf)

---

_[View the full topic](https://developer.sailpoint.com/discuss/t/prevent-sailpoint-from-removing-racf-default-group/207470)._