I think this post would help you Workflow to remove ALL leavers’ standing access - IdentityNow (IDN) / Show and Tell - SailPoint Developer Community Forum