Roles in SailPoint ISC showing revocable: NO- Role revocation Option not available in UI

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hello SailPoint,

We have identified that all the assigned roles in Prod and SandBox in the tenant does not have revoke option and the “revocable” properties set to NO automatically, which is preventing to revoke the role from user through UI. We need assistance in understanding the root cause and remediate the issue. But the API role revoke request is working as expected.

Regards
Raj

2

Since the API works, this strongly suggests the issue is not a fundamental problem with role revocation in ISC itself. It’s more likely a configuration or data issue related to how roles are defined or managed.

Check Entitlement Aggregation (If Applicable):

  1. If roles are created via aggregation from a source, review the aggregation configuration.
  2. Ensure the aggregation process is correctly mapping the source system’s revocation information to the revocable attribute in ISC.

Review Governance Group Settings (If Applicable):

  1. If roles are managed through governance groups, check the group’s settings.
  2. See if there are any settings that might be overriding the role’s revocable property.

Data Analysis (Advanced):

  • If the above steps don’t reveal the cause, you might need to use the ISC API to query role objects and analyze their revocable attribute in bulk.
  • This can help identify patterns or inconsistencies.

SailPoint Support: If you’ve exhausted the above steps and the issue persists, consider contacting SailPoint support for assistance. They can help investigate potential data corruption or other platform-level issues.

3

We are seeing the same issue.

4

Please have a look at
Enhancement: Access Revocation! - Announcements / Product News - SailPoint Developer Community

Latest/Recent comments from @Shanmukh , it seems relevant to this one.

5

I have the same requirement and i am unable to see identity removal for role from UI.

Can you please confirm which API need to call to remove individual identity from specific role.

Thanks

6

Hello @pattabhi,

Really appreciate your help, this issue had occurred from the SailPoint. They have resolved it from their end.

1 Like
7

Hi @rajrout2024

Happy to hear that the issue has been resolved by SailPoint.
My guess is correct :grinning_face:,

1 Like