Removal of Entitlement from manager profile directly

[Faizan9097 (Md Faizan)]

I provisioned one user in IdentityNow with entitlement tab but not able to revoke the access of that user from manager profile. Not getting an option to revoke the directly from entitlement page just like access profile. Can you please suggest how we can achieve this.

[naveenkarthikkrk (NAVEEN KARTHIK)]

Hi Md,
You can’t revoke entitlement directly from entitlement page.If you want to remove the entitlement access then do it by creating a campaign and revoke the access.
Thanks!!

[KRM7 (Krishna Mummadi)]

Hi @Faizan9097

Welcome to SailPoint Developer community.

ISC got a new feature a couple of days/weeks back, we can edit entitlement.

Access → Entitlements → Click on some Entitlement which has Identities, you have Revoke option. Not sure if it is rolled out to your tenant already.

Thanks
Krish

[Faizan9097 (Md Faizan)]

Hi @KRM7,
I tried to remove the access with your method . I worked fine but I start facing one problem that after termination the account automatically calls create operation on that users.

You can in the post after disable automatically create operation got call . Although this is a pure requestable application.

[KRM7 (Krishna Mummadi)]

We need to dig more, what is triggering Create Account through Add Entitlement.

Check if the entitlement revoked is part of an Access Profile or Role with Assignment criteria ?

[Faizan9097 (Md Faizan)]

Hi @KRM7 ,
I am not removing the entitlement with Access profile or Role with Assignment criteria. I am just directly revoke the entitlement from AccessModel → Entitlements of that users.

Whenever I am giving access and through Access profile and doing the termination we don’t face this create account triggering.