# Remove the entitlements assigned via Roles/ applications for SAP direct connector

**URL:** <https://developer.sailpoint.com/discuss/t/remove-the-entitlements-assigned-via-roles-applications-for-sap-direct-connector/3085>\
**Category:** SHF Discussion and Questions\
**Created:** [February 18, 2022, 12:04pm UTC](https://developer.sailpoint.com/discuss/t/remove-the-entitlements-assigned-via-roles-applications-for-sap-direct-connector/3085 "2022-02-18T12:04:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![seemarani](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@seemarani](https://developer.sailpoint.com/discuss/u/seemarani)\
**Post date:** [February 18, 2022, 12:04pm UTC](https://developer.sailpoint.com/discuss/t/remove-the-entitlements-assigned-via-roles-applications-for-sap-direct-connector/3085/1 "2022-02-18T12:04:13Z")

</div>

Hi Team,

We are in the process of implementing the SAP provisioning with IdentityNow. SAP account is getting created as request based via application request/ role request. When the user terminated we would like to remove all the assigned roles and keep some default roles within. Is anyone worked on this. Is this needs to be implemented via before provisioning rule or certification campaign to revoke access. Any suggestion will help

---

<div class="post-metadata">

**Author:** ![briane\_bullock](https://avatars.discourse-cdn.com/v4/letter/b/41988e/32.png) [@briane\_bullock](https://developer.sailpoint.com/discuss/u/briane_bullock)\
**Post date:** [February 18, 2022, 2:26pm UTC](https://developer.sailpoint.com/discuss/t/remove-the-entitlements-assigned-via-roles-applications-for-sap-direct-connector/3085/2 "2022-02-18T14:26:45Z")

</div>

Yes, this will require a before provisioning rule.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [July 19, 2023, 2:22pm UTC](https://developer.sailpoint.com/discuss/t/remove-the-entitlements-assigned-via-roles-applications-for-sap-direct-connector/3085/3 "2023-07-19T14:22:38Z")

</div>