Removal of Entitlements added via API

[mingsiewang (Ang Ming Siew)]

Hi,

I have a requirement where extra entitlements will be added via API and this addition of entitlement has been tested and works.
However, I have an issue now where when the user gets offboarded and the account is disabled, but this newly added entitlements (via the API) does not get removed. Can I check if there is a way for these entitlements to get removed whenever the user gets offboarded?

[sharvari (Sharvari Shah)]

You can try using a workflow to achieve this. Please refer this post for solution.

Workflow to remove ALL leavers' standing access

Hi everyone, IdentityNow Provisioning relies mainly on either roles’ membership criteria to revoke access for leavers, which can sometimes mean not all access is removed in an automated fashion for leavers. This workflow auto-revokes any standing access leavers have either through a micro targeted access certifications or by leveraging revoke access requests after being terminated. This should ensure that all leavers’ access is removed upon terminated and not just access assigned through birt…