Scheduled Removal of specific Entitlement(Test Group) from identities via workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
2

Yes, you can :

  1. Use workflow schedule trigger
  2. Search all identities with entitlement search “Test group” with HTTP Action, search endpoint, and filter like :
{
    "query": {
        "query": "@access((name.exact:\"Test Group\" AND type: \"ENTITLEMENT\"))"
    },
    "indices": [
        "identities"
    ],
    "includeNested": true,
    "sort": [
        "displayName"
    ],
      "queryResultFilter": {
    "includes": [
      "id",
      "displayName"
    ],
    "excludes": [
      "stacktrace"
    ]
  }
}
  1. Then use loop operator and for each entry use Manage Access to revoke entitlement for each identity

Note: loop cannot have entry greater than 100, so ifyou have many entries,you can condiser this Alternative ways to match the limitation of worflow loop allowing 100 iterations - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community