# Remove Entitlements When Disabling Accounts

**URL:** <https://developer.sailpoint.com/discuss/t/remove-entitlements-when-disabling-accounts/60660>\
**Category:** Connectivity Documentation Feedback\
**Tags:** va-con-docs\
**Created:** [June 3, 2024, 7:40am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlements-when-disabling-accounts/60660 "2024-06-03T07:40:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![DocsTeam](https://avatars.discourse-cdn.com/v4/letter/d/ecd19e/32.png) [@DocsTeam](https://developer.sailpoint.com/discuss/u/DocsTeam)\
**Post date:** [June 3, 2024, 7:40am UTC](https://developer.sailpoint.com/discuss/t/remove-entitlements-when-disabling-accounts/60660/1 "2024-06-03T07:40:06Z")

</div>

When you disable accounts via provisioning, you can remove any associated entitlements at the same time.

* * *
This is the companion discussion topic for the documentation at [https://documentation.sailpoint.com/connectors/webservices/help/integrating\_webservices/remove\_entitlements\_when\_disabling\_accounts.html](https://documentation.sailpoint.com/connectors/webservices/help/integrating_webservices/remove_entitlements_when_disabling_accounts.html)

---

<div class="post-metadata">

**Author:** ![rmccoy-unum](https://avatars.discourse-cdn.com/v4/letter/r/d07c76/32.png) [@rmccoy-unum](https://developer.sailpoint.com/discuss/u/rmccoy-unum)\
**Post date:** [May 8, 2025, 12:50pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlements-when-disabling-accounts/60660/2 "2025-05-08T12:50:07Z")

</div>

When this scenario is required, is it possible to have a variable number of entitlements based on the account being disabled without creating a before provisioning rule - meaning configuration in the UI only in such a way that each instance of entitlement is repeated as specified in the XML scheme?

For example, a user has 3 entitlements, 1,3,6

We need to send a disable body that looks like this: (897 is a disable)

```auto
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:tran="http://transferobjects.webservices.security.somedomain.com" xmlns:tran1="http://transferobjects.webservices.common.somedomain.com">
   <soapenv:Header/>
   <soapenv:Body>
      <tran:UpdateUserRequest>
         <tran:strUserID>USERACCOUNTNAME</tran:strUserID>
         <tran:ActiveFlagCode>897</tran:ActiveFlagCode>
         <tran:RemoveAssignedRolesList>
            <!--Zero or more repetitions:-->
            <tran:intRoleID>1</tran:intRoleID>**
            <tran:intRoleID>3</tran:intRoleID>**
            <tran:intRoleID>6</tran:intRoleID>**
         </tran:RemoveAssignedRolesList>
      </tran:UpdateUserRequest>
   </soapenv:Body>
</soapenv:Envelope>

```

---

<div class="post-metadata">

**Author:** ![joshb488](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/joshb488/32/11416_2.png) [@joshb488](https://developer.sailpoint.com/discuss/u/joshb488)\
**Post date:** [May 9, 2025, 2:33pm UTC](https://developer.sailpoint.com/discuss/t/remove-entitlements-when-disabling-accounts/60660/3 "2025-05-09T14:33:09Z")

</div>

Hi @rmccoy-unum,

This question might be better answered by the community in the [ISC Discussions and Questions](https://developer.sailpoint.com/discuss/c/identity-security-cloud/discussion-and-questions/37) category. I can move this post there, but since you shared a code sample, I wanted to ask before I did so.

-Josh