Scheduled Removal of contains "APP-ISSOW*" Entitlements

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

Please consider addressing the following when creating your topic:

  • What have you tried?
  • What errors did you face (share screenshots)?
  • Share the details of your efforts (code / search query, workflow json etc.)?
  • What is the result you are getting and what were you expecting?

Hi,

Good day! I’m working on a workflow and facing some challenges.

Use case: I’m using a search to get all identities whose accounts ended after the 13th day and that have APP-ISSOW* entitlements.

However, I’m having an issue when trying to request the removal of entitlements for multiple identities, it fails to revoke the access. Here’s the error I got from Loop1.

errorMessage": “task failed: activity error (type: sp:external:http:v2, scheduledEventID: 5, startedEventID: 6, identity: 1@sp-workflow-worker-stg-ap-southeast-2-647b4f4cfc-gzjlx@sp-workflow-engine): request failed (type: HTTP Response Returned a Client Error, retryable: false): request failed: 400 - 400 Bad Request - {\“detailCode\”:\“400.1.3 Illegal value\”,\“trackingId\”:\“4950ec4d3d5b42db9f6970eb5ff29afa\”,\“messages\”:[{\“locale\”:\“und\”,\“localeOrigin\”:\“REQUEST\”,\“text\”:\“Value of \\\“item.type\\\” is empty or contains invalid data.\”},{\“locale\”:\“en-US\”,\“localeOrigin\”:\“DEFAULT\”,\“text\”:\“Value of \\\“item.type\\\” is empty or contains invalid data.\”}],\“causes\”:[]}”,
“payload”: null

Thank you!

ScheduleRemovalForSpecificAccess.txt (7.6 KB)

Hi @earvs0527 ,

I do see you are removing the access in the second loop operator which is incorrect. You need to handle it in the first loop operator itself. Also, there is no need to have second loop operator.

You can have below steps inside loop operator. “Get Access“ will get you the list of entitlements that you need and pass the same to “Manage access“ step to remove them