Remove the entitlement without using manage access

[karishma_shaik2 (Shaik Karishma)]

Hello Everyone,

We are using Put V3 API to append the entitlement for delimited application (here delimited application is multi entitlement)

{
    "attributes":
{
    "Id":"xxx",
    "Name":"xxx",
    "FirstName":"xxx",
    "LastName":"xxx",
    "Location":"xxx",
    "Manager":"xxx",
    "Email":"xxx",
    **"User Role":"{{$.hTTPRequest.body.attributes.['User Role']}},Admin",
   "Status":"xxxx"
   }
}

Here {{$.hTTPRequest.body.attributes.[‘User Role’]}} contains Adjuster (this is old entitlement. Admin is new entitlement )

Can someone please help how to remove Adjuster or Admin entitlement from that account without using Manage Access (if we use manage access then request goes to request center which we don’t want).

[agutschow (Alicia Gutschow)]

@karishma_shaik2

ge Access (if we use manage access then request goes to request center which we don’t want).

Can you tell us more about your use case? Why are you programmatically modifying the entitlement? Why are you trying to remove one part of the entitlement? What would trigger removing one part of the entitlement?

[karishma_shaik2 (Shaik Karishma)]

Hello @agutschow,

we have a workflow with trigger as schedule trigger which will loop the delimited accounts(cais_temp_account_creation delimited - this is the dummy delimited application. We are storing the ticket Number which we created in servicenow ,application name which we requested, entitlement which we requested, static ticket status as “Open” and some other details like firstname,lastname ) of particular user and get the ticket Number from that account and check that ticket in ServiceNow whether it is open or closed if it is closed then we need to create the original delimited account using cais_temp_account_creation delimited attributes (in that account we have requested application name(this is original delimited application), requested entitlement, other details like firstname…).

First we are checking whether original delimited application present are not . If not present then we are using V3 Create API to create the account. If already that account is present then we need to append the entitlement. For that we used V3 PUT API to append the entitlement.

Now I get request to revoke the entitlement. How can we revoke the entitlement without using Manage access ?

[agutschow (Alicia Gutschow)]

Since these are flat file sources, have you tried to use the PATCH API?

update-account | SailPoint Developer Community

[karishma_shaik2 (Shaik Karishma)]

We tried but entitlement is getting replaced instead of appending