Hello All, Can anyone help me in this scenario? I need to remove some roles that have entitlements of Active Directory but not all access as soon as the user’s LCS state is set to ‘inactive.’. Is it possible to add the access removal code to a ‘Before provisioning’ rule or any other solution ? As w…

If you don’t have the workflow feature, best bet would be to make API calls from a PS script connected to AfterModify Native Rule. Using PAT you can make API calls to get all roles of the user and submit revoke request as well

Role and access removal on LCS change

Identity Security Cloud (ISC) ISC Discussion and Questions

suresh4iam (Suresh Kumar Palanisamy) September 23, 2025, 6:20pm 3

You can refer more details about the new feature here New Capability: Remove All Access on Termination - Announcements / Product News - SailPoint Developer Community

1 Like

Topic		Replies	Views
Active directory entitlement removal ISC Discussion and Questions identity-security-cloud , lifecycle-management	4	896	December 24, 2023
Remove all Access when user state changes from Inactive to Terminated ISC Discussion and Questions workflows , identity-security-cloud	11	376	November 22, 2024
Entitlements removal when Lifecycle State changes to inactive ISC Discussion and Questions identity-security-cloud , entitlements	4	1245	July 19, 2023
Role Entitlement Removal ISC Discussion and Questions identity-security-cloud , provisioning , roles , access-profiles , entitlements	16	2045	September 28, 2024
Leaver Process Deprovisioning ISC Discussion and Questions identity-security-cloud	4	258	October 25, 2024

Role and access removal on LCS change

Related topics