You can leverage this item as well: Workflow to remove ALL leavers' standing access
If you need to add filters, you can update the search filters in the workflow linked in the above article. Try something like…
{“indices”:[“identities”],“query”:{“innerHit”:{“query”:“standalone:true AND NOT source.id:source ID AND NOT “name to filter””,“type”:“access”},“query”:“id:"{{$.trigger.id}}"”}} (e.g., for standalone entitlements)
Test these out by running the search through postman and making sure you get the results you want