Got it @Oussamatahiaida, though BP rule doing the job and if you want more control and cost effective, I recommend considering the Workflow with Campaign Filter option where you can be more specific on source and entitlement level accesses for revoking the requestable access items . You can refer it here Workflow to remove ALL leavers’ standing access - Identity Security Cloud (ISC) / ISC Community Knowledge Base - SailPoint Developer Community