# Unable to remove entitlements through Manage Access page if those are part of Roles **URL:** \ **Category:** IIQ Discussion and Questions\ **Tags:** roles, identityiq\ **Created:** [April 9, 2024, 6:22pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749 "2024-04-09T18:22:19Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![sunilasm](https://avatars.discourse-cdn.com/v4/letter/s/cab0a1/32.png) [@sunilasm](https://developer.sailpoint.com/discuss/u/sunilasm)\ **Post date:** [April 9, 2024, 6:22pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/1 "2024-04-09T18:22:20Z")
### Which IIQ version are you inquiring about? Version 8.3 ### Share all details related to your problem, including any error messages you may have received. Why does Sailpoint not allow a user to remove an entitlement if it is not part of an assigned role but is on a detected role? Also, if there is no way around being able to remove an entitlement from a user and we have to remove it from the role so they can, how long does it take Sailpoint to update before they can submit a request? Thank you! ---
**Author:** ![amansingh](https://avatars.discourse-cdn.com/v4/letter/a/d9b06d/32.png) [@amansingh](https://developer.sailpoint.com/discuss/u/amansingh)\ **Post date:** [April 9, 2024, 7:26pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/2 "2024-04-09T19:26:12Z")
Usually, it is recommended to have assignment criteria or IdentitySelector rule to avoid accidental provisioning/deprovisioning. Have you explored that option? ---
**Author:** ![kjakubiak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kjakubiak/32/7052_2.png) [@kjakubiak](https://developer.sailpoint.com/discuss/u/kjakubiak)\ **Post date:** [April 9, 2024, 7:30pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/3 "2024-04-09T19:30:35Z")
Is there any particular error you are getting when you try to remove the entitlement? Generaly IIQ should not limit you in removal of managed attributes unless you limit it on the quicklink definition level. ---
**Author:** ![Unique](https://avatars.discourse-cdn.com/v4/letter/u/f4b2a3/32.png) [@Unique](https://developer.sailpoint.com/discuss/u/Unique)\ **Post date:** [May 29, 2024, 3:36pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/4 "2024-05-29T15:36:21Z")
I am also facing similar issue. Any help is appreciated. ---
**Author:** ![bellamkonda\_vb](https://avatars.discourse-cdn.com/v4/letter/b/9fc348/32.png) [@bellamkonda\_vb](https://developer.sailpoint.com/discuss/u/bellamkonda_vb)\ **Post date:** [May 30, 2024, 8:18am UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/5 "2024-05-30T08:18:19Z")
Hello @Unique, what is the issue you are facing exactly and what is error you are getting? ---
**Author:** ![Unique](https://avatars.discourse-cdn.com/v4/letter/u/f4b2a3/32.png) [@Unique](https://developer.sailpoint.com/discuss/u/Unique)\ **Post date:** [May 31, 2024, 10:26pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/6 "2024-05-31T22:26:38Z")
@bellamkonda_vb When I delete entitlement from entitlement catalogue, the entitlement in roles is broken. All the identities with that role are unable to go through role propagation. Basically, it is not reflecting throughout role and its identities. ---
**Author:** ![sasrastreasury](https://avatars.discourse-cdn.com/v4/letter/s/4bbf92/32.png) [@sasrastreasury](https://developer.sailpoint.com/discuss/u/sasrastreasury)\ **Post date:** [June 18, 2024, 4:21pm UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/7 "2024-06-18T16:21:14Z")
I am seeing the same behavior. Basically I am unable to remove an entitlement that’s is contained in detected role via Manager User Access. Only the IT role shows up under the remove access tab. So what is the guidance to remove only lets say 1 out of the 6 entitlements and not the entire IT role and all 6 of its entitlements? Note this role is detected and not assigned. Application only wants to remove one of the entitlements and keep the rest for that particular user. This means its not role update. ---
**Author:** ![TKiran](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/tkiran/32/15208_2.png) [@TKiran](https://developer.sailpoint.com/discuss/u/TKiran)\ **Post date:** [August 13, 2024, 10:14am UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/8 "2024-08-13T10:14:14Z")
Hello Shawn, I am also stuck at exactly this requirement where a user needs to submit an access request to remove some of the entitlements part of the detected roles but not able to do so. Were you able to get any help on this regards ? Thanks, Sai Kiran. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [October 12, 2024, 10:14am UTC](https://developer.sailpoint.com/discuss/t/unable-to-remove-entitlements-through-manage-access-page-if-those-are-part-of-roles/43749/9 "2024-10-12T10:14:23Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.