# Remove Entitlement from Source (Application) **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** identity-security-cloud, entitlements, sources, connectors\ **Created:** [March 11, 2026, 5:00am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170 "2026-03-11T05:00:42Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 11, 2026, 5:00am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/1 "2026-03-11T05:00:42Z")
Hi Folks, I have some unwanted entitlements in my application source and wants to remove them while keep existing intact. Tried to download the Entitlement Schema but nothing in the extract comes in. How i can remove them from the Entitlements section. Existing Entitlements: AD Account Role ADD Accounts – want to remove AD Sample accounts - want to remove Thanks ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [March 11, 2026, 5:09am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/2 "2026-03-11T05:09:21Z")
Hi @msingh39 , Are you using AD? If yes, you can use an LDAP filter to prevent those accounts from being aggregated into SailPoint. If you are not using AD, please let us know which source you are dealing with. Thanks. ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 11, 2026, 5:17am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/3 "2026-03-11T05:17:05Z")
Thanks, its a delimited source from which want to remove. ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [March 11, 2026, 5:25am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/4 "2026-03-11T05:25:05Z")
You can download the account export and remove the unwanted entitlements associated with the accounts. Also, export the entitlements separately and remove them there as well. After making the changes, re-aggregate the accounts and entitlements. ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 11, 2026, 5:35am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/5 "2026-03-11T05:35:59Z")
Account removal is fine but extracting the Entitlement and updating sheet back under “Entitlement” option does not work well. The Ent is still exist there. ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [March 11, 2026, 7:09am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/6 "2026-03-11T07:09:46Z")
> [@msingh39](#): > > he Ent is still exist there. Hi @msingh39 , Kindly follow below steps : 1. Export the accounts and entitlements. 2. Download the entitlement schema. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/4/1/41cc090679c92396ea4dc3033f0b10bca684d94d.png) 3. Copy all entitlements from entitlement export that done in step 1. 4. Paste all entitlement in entitlement schema sheet. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/e/1/e11e65f51d08b69bd8d8f90efd1f74b789c3204e.png) 1. Remove the entitlement from the sheet. Also remove it from the accounts. ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 12, 2026, 12:24am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/7 "2026-03-12T00:24:28Z")
Thanks for crafting that steps. I did exactly the same steps, but the Entitlements are still there. Attached is the screenshot, NADM I want to keep and remove ADM ones. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/9/b91a33b5ae566a49e7f26a4d7de1cf81f6e92a28.png) ---
**Author:** ![ts\_fpatterson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ts_fpatterson/32/26704_2.png) [@ts\_fpatterson](https://developer.sailpoint.com/discuss/u/ts_fpatterson)\ **Post date:** [March 12, 2026, 1:16am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/8 "2026-03-12T01:16:08Z")
Are the entitlements part of an existing certification or associated to a role or access profile? ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 12, 2026, 1:20am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/9 "2026-03-12T01:20:03Z")
yes part of Access profile but somehow not able to remove that. ---
**Author:** ![ts\_fpatterson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ts_fpatterson/32/26704_2.png) [@ts\_fpatterson](https://developer.sailpoint.com/discuss/u/ts_fpatterson)\ **Post date:** [March 12, 2026, 1:28am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/10 "2026-03-12T01:28:40Z")
Is the access profile part of a certification, associated with an identity profile, or role? Are you able to remove the entitlement from the access profile or to delete the access profile? Is the access profile requestable? Are there pending requests for the entitlement or access profile? ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [March 12, 2026, 6:19am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/11 "2026-03-12T06:19:18Z")
Hi @msingh39 , Can you try to do reset entitlement and then do entitlement aggregation. Thanks ---
**Author:** ![Deepak\_Chaudhary](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/deepak_chaudhary/32/34380_2.png) [@Deepak\_Chaudhary](https://developer.sailpoint.com/discuss/u/Deepak_Chaudhary)\ **Post date:** [March 12, 2026, 6:47am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/12 "2026-03-12T06:47:09Z")
Hi @msingh39 if you have followed all the steps mentioned by other developers then do step by step As you mentioned that schoema download is empty, first perform an Entitlement Export from the Entitlements page or you can use the List Entitlements API to get the full list of with the existing IDs. Create a CSV file containing only the entitlements you wish to keep. If you are using a Delimited File connector Upload your cleaned CSV file with the entitlements you want. Trigger an Entitlement Aggregation Note-Make sure not Account Aggregation. with Account aggregations it will never delete entitlements. Please let us know if it works. ---
**Author:** ![ts\_fpatterson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ts_fpatterson/32/26704_2.png) [@ts\_fpatterson](https://developer.sailpoint.com/discuss/u/ts_fpatterson)\ **Post date:** [March 12, 2026, 10:37am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/13 "2026-03-12T10:37:50Z")
I do not recommend resetting the entitlement on the source as any access profiles, roles, or anything else with any entitlements from that source will be affected. This could be disastrous for large environments with the amount of work needed. and not something to do in production in my opinion. If others have experiences, otherwise I would be very interested in your approach. ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [March 12, 2026, 12:33pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/14 "2026-03-12T12:33:09Z")
Hi @ts_fpatterson Thank you for sharing your perspective. I agree that resetting the entitlement on the source could have a significant impact on access profiles, roles, and other dependent configurations, especially in large environments. We will definitely avoid making such changes directly in production. We are currently reviewing alternative approaches and will ensure proper validation in a lower environment before considering any changes. I would also appreciate hearing if anyone has implemented a safer approach in similar scenarios. ---
**Author:** ![ssowmya567](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ssowmya567/32/30945_2.png) [@ssowmya567](https://developer.sailpoint.com/discuss/u/ssowmya567)\ **Post date:** [March 13, 2026, 10:16pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/16 "2026-03-13T22:16:53Z")
Hi @suraj_gorle Were you able to find any alternative approach for this? ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 17, 2026, 11:11pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/17 "2026-03-17T23:11:04Z")
Tried again but same behavior. Also when I did Entitlement aggregation, it created another entry with same name but the Type is “group”. ---
**Author:** ![j\_place](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/j_place/32/19181_2.png) [@j\_place](https://developer.sailpoint.com/discuss/u/j_place)\ **Post date:** [March 17, 2026, 11:20pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/18 "2026-03-17T23:20:55Z")
Hi @msingh39 Have the entitlements that you can’t delete been detected from accounts being members? You can’t delete detected entitlements, that is standard ISC functionality. ---
**Author:** ![msingh39](https://avatars.discourse-cdn.com/v4/letter/m/f08c70/32.png) [@msingh39](https://developer.sailpoint.com/discuss/u/msingh39)\ **Post date:** [March 17, 2026, 11:40pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/19 "2026-03-17T23:40:22Z")
Yes, those are not part of any access profile or identities. So what happening is:- I followed below steps but after using the existing Ent entries, it created another one with same name but Type as Group. But the others didn’t get deleted which is not having any identities or AP tagged. Also, the ID details mentioned in below screenshot, does it actual ID for that Ent OR we have to put same name as ENT? - Paste all entitlement in entitlement schema sheet. [![image](https://global.discourse-cdn.com/sailpoint/original/3X/e/1/e11e65f51d08b69bd8d8f90efd1f74b789c3204e.png)](https://global.discourse-cdn.com/sailpoint/original/3X/e/1/e11e65f51d08b69bd8d8f90efd1f74b789c3204e.png "image") [image1106×256 6.38 KB](https://global.discourse-cdn.com/sailpoint/original/3X/e/1/e11e65f51d08b69bd8d8f90efd1f74b789c3204e.png "image") - Remove the entitlement from the sheet. Also remove it from the accounts. ---
**Author:** ![j\_place](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/j_place/32/19181_2.png) [@j\_place](https://developer.sailpoint.com/discuss/u/j_place)\ **Post date:** [March 17, 2026, 11:48pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/20 "2026-03-17T23:48:58Z")
Hi @msingh39 Apologies, I’m not sure I understand. I asked whether the entitlements have ever been detected on an account. If so they can’t be deleted. ---
**Author:** ![lampard08](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/lampard08/32/32646_2.png) [@lampard08](https://developer.sailpoint.com/discuss/u/lampard08)\ **Post date:** [March 18, 2026, 12:38am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170/21 "2026-03-18T00:38:38Z")
Fix your accounts schema to begin with. Post both schemas here. I think your accounts schema is using entitlement as entitlement type as opposed to group type. [Next page](https://developer.sailpoint.com/discuss/t/remove-entitlement-from-source-application/199170.md?page=2)