Which IIQ version are you inquiring about? 8.4 Share all details about your problem, including any error messages you may have received. Hi Community, I am looking for guidance and best practices regarding the full lifecycle of accounts managed via Roles in a JDBC/Direct Management application. O…

Hi @thp015 What you are experiencing is actually expected behavior in iiq due to how the platform separates account lifecycle from role lifecycle. When a Role is assigned, iiq can trigger a Create account operation via the provisioning policy. However, when the Role is removed, iiq does not automat…

@thp015 Please enable logs in your jdbc application’s before provisioning rule and see In case of removal of roles, if plan is available or not. If everything is filtered out, and nothing in plan for application, then before prov will not be triggered. You may also give it a try by creating a dummy…

Hi @thp015 , Welcome to Sailpoint Developer forum. This is OOTB behaviour. removal of role will only remove entitlements on target side, not remove account. As @santhirajumunganda and @neel193 suggested , you can add logic that if there are no entitlements after your role removal request, add Del…

Thank you for the help! It’s clear that I need to explicitly handle the deprovisioning logic as you suggested. I’ll give this a try in my environment.

This is a well-known IIQ behavior. IIQ does not automatically send a Delete account operation when a role is removed — it only sends Delete if the application’s Provisioning Policy has a Delete Policy defined AND the IIQ lifecycle state logic triggers deprovision. Here’s exactly what needs to be con…

Role-based Provisioning & Deprovisioning Best Practices

IdentityIQ (IIQ) IIQ Discussion and Questions

phodgdon (Paul Hodgdon) March 6, 2026, 1:13am 7

This is exactly why the loopback connector exists. It treats applications as entitlements. I would advise to go down that route.

Topic		Replies	Views
Account disable after role removal IIQ Discussion and Questions identityiq , provisioning	3	300	August 16, 2024
Issue with Role Provisioning Policy for Web Services application during role removal IIQ Discussion and Questions webservice-connector , identityiq , provisioning , roles	10	106	February 20, 2026
Remove Business roles from Identity cube IIQ Discussion and Questions identityiq	9	139	November 11, 2025
Deprovisioning business roles IIQ Discussion and Questions identityiq , roles	8	207	March 28, 2025
JDBC - automatic Role provisioning IIQ Discussion and Questions identityiq , provisioning , roles , jdbc-connector	3	119	July 3, 2024

Role-based Provisioning & Deprovisioning Best Practices

Related topics