Sailpoint is failing to remove one entitlement from an user, it claims "dependency"

[pereiram (Mateus Tavano Pereira)]

Which IIQ version are you inquiring about?

8.4.p2

Please share any images or screenshots, if relevant.

I simply try to remove a group from AD after a certification or using a basic remove operation and i get this message below inside the provisioning project.

retain=“true”
And once i execute i see this below:

Share all details about your problem, including any error messages you may have received.

My problem is that my provisioning plan is getting filtered and the reason is “dependency”, like the pictures mentioned already.
Any ideas? I checked already, my first idea was, well, maybe the user is already inside another IT role or business role, that might be preventing the removal, but even when i try to remove the group directly without removing the role first, this happens, so i’m curious.

[mkumariaas (M Kumar)]

@pereiram this is expected behaviour if your Ent is inside in role and that role user is already part then it will not remove. As anyway that role will be added again.
You can try one more thing which kind of help during for filtering, pass noFiltering =true
while you are compile and executing the plan from provisioner. And do the same in workflow.
It may b resolve other filter condition but this dependency check otherwise first remove role. It will remove entitlement also.

[pereiram (Mateus Tavano Pereira)]

Ok, Thanks for clarify.