Remove Access Request

Hi,

SailPoint ISC makes it very easy to request access. This is intuitive and easy-to-use. However, is it possible to request for previously assigned manually requested access to be remove? If so, how? This page indicates that only managers can request access removal for their subordinates: Managing Requests for Entitlements - SailPoint Identity Services

The only other way I have been able to find to remove access is via Admin > Access Model > Roles > Details > ‘Revoke’ for the specified identity, but this is counterintuitive and I don’t know if non-SP admin app owners will have this option available to them.

Hi Dominick!

The only ways to have access removed from an account are through certification campaigns, managers removing access from their direct reports, ISC Admin revoking access, and by calling an API through something like Postman.

In the link you mentiones, it highlights these options in the Revoking Requested Entitlements section: Managing Requests for Entitlements - SailPoint Identity Services

This is the API for submitting an access request and it details the available parameters for submitting a revocation request:

I know this probably isn’t the best answer you were hoping for, but it is unfortunately how these are handled in ISC currently. There is an idea for self-service access revocation requests you can check out and vote for here if is something you would like to see.

Please let me know if this helps!

  • Zach
4 Likes

hey @dominick-miller,

you can Achieve this using Forms and Workflows but theres no way to easily let users access it.

1 Like

Yes, this is disappointing, especially since SailPoint has this functionality in IIQ. It also seems like a miss for role owners to be unable to revoke. Anyways, thank you for the comprehensive answer.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.