Hi Everyone, I wanted to remove the entitlement (Test group) Automatically from all identities who currently have it, By executing a scheduled workflow everyday.Can we do that without using a saved search ? Thanks.

Hello @saikumarS Inside of your loop in “Manage Access” you should use : $.loopThroughIdentities.loopInput.id [image] Using the filter name "Test computer group" will return every identity that has "Test computer group" in one of its name fields. There are several name fields in the Identity o…

[image] saikumarS: Test group Yes, you can : Use workflow schedule trigger Search all identities with entitlement search “Test group” with HTTP Action, search endpoint, and filter like : { "query": { "query": "@access((name.exact:\"Test Group\" AND type: \"ENTITLEMENT\"))" …

Hi @saikumarS we can do that , And we don’t really need saved search query . You can use the HTTP operation and implement search API as mentioned by @baoussounda . but things to keep in mind: You cannot revoke entitlement if it is not provisioned through RBAC or Birthright It should be revoca…

Hi @baoussounda @sidharth_tarlapally We have many user with Specific Entitlement “Test computer group” ,Workflow is executing properly however, entitlement is not getting removed . Can you check the workflow and let m know if im missing anything [image] Thanks RemoveSMTPGroup20250810 (3).json …

Hi @sidharth_tarlapally @baoussounda , RemoveSMTPGroup20250811.json (2.4 KB) I have updated the same and entitlements are not gettiing removed . Can you look into it.. Thanks

In your manage access request Body you have : {"accessItems":[{"id":"e7987bfd753f4a3481718cb895cebee2","name":"Test computer group","type":"entitlement"}]} You should replace with : [{"id":"e7987bfd753f4a3481718cb895cebee2","name":"Test computer group","type":"ENTITLEMENT"}]

@saikumarS While I see that people have already gave you the solution, I was wondering why you have to do this ? I mean generally if we want to remove any entitlements, we can do that in one go using certification campaign, if we are removing some entitlements on schedule basis, then there is some …

Hello @vdivakar , Thanks for taking time to reply, but if you are unsure of the actual requirement, its better to skip commenting. The approach is intentional and based on constrains you may not be aware. Thank you, Saikumar

Scheduled Removal of specific Entitlement(Test Group) from identities via workflow

Identity Security Cloud (ISC) ISC Discussion and Questions

baoussounda (Ousmane N'DIAYE) August 11, 2025, 10:06am 7

@saikumarS what the execution log Said ? in your env, is entitlement request is enabled ?

Topic		Replies	Views
Scheduled Removal of contains "APP-ISSOW*" Entitlements ISC Discussion and Questions workflows , identity-security-cloud	2	37	March 29, 2026
Workflow - Remove Entitlements from selected source ISC Discussion and Questions workflows , identity-security-cloud , entitlements	19	2571	October 24, 2023
Workflow - Remove entitlements when a identity turns inactive ISC Discussion and Questions workflows , identity-security-cloud , entitlements	14	471	April 13, 2025
Workflow Remove Entitlements ISC Discussion and Questions workflows , identity-security-cloud , lifecycle-management , entitlements	9	263	November 22, 2024
Workarround removal of access rights (restriction of items in Workflow) ISC Discussion and Questions workflows , identity-security-cloud	5	91	March 31, 2025

Scheduled Removal of specific Entitlement(Test Group) from identities via workflow

Related topics