# Use plan.entitlementAttr programmatically

**URL:** <https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018>\
**Category:** IIQ Discussion and Questions\
**Tags:** webservice-connector, rules, identityiq\
**Created:** [March 2, 2026, 7:38pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018 "2026-03-02T19:38:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![ninosp](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@ninosp](https://developer.sailpoint.com/discuss/u/ninosp)\
**Post date:** [March 2, 2026, 7:38pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/1 "2026-03-02T19:38:49Z")

</div>

## 

Hi!

I have a question regarding $plan.nativeIdentity$ and $plan.entitlement$ that can be used in the request body in a given http operation (create user or add entitlement e.g.) for example like this:

```auto
{ 
“userid” : $plan.nativeIdentity$

“groups” : $plan.entitlement$

 }

```

Let’s say this was in an add entitlement operation of the web service connector. Then they would resolve to the account id and the current entitlement being added.

I can also fetch them in a before rule by accessing the provisioningPlan but it would require me to iterate through provisioningPlan \> accountRequest \> attributeRequest verify the operation (add/delete e.g.) for the attributeRequest and then extract it.

I can also fetch the requestEndpoint \> get the request body and extract it with maybe regexp or json-methods substringing etc (maybe I’m not using JSON at all).

My question is:

Is it possible to use $plan.entitlement$ or $plan.nativeIdentity$ programmatically in a rule just like it can be used in the http-body for the operation?

I can’t quite understand the architecture but it seems a bit cumbersome to go through a provisioningPlan that contains all attributes being changed along with all operations with at least two for-loops or use regexp/substrings etc from the requestEndpoint body when the information I want in the correct context can obviously be fetched just not in a rule?

Nino

---

<div class="post-metadata">

**Author:** ![Peddapolu](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@Peddapolu](https://developer.sailpoint.com/discuss/u/Peddapolu)\
**Post date:** [March 2, 2026, 9:21pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/2 "2026-03-02T21:21:51Z")

</div>

Hi @ninosp ,

You can get the entitlements values directly in the JSON body of the plan. Find the attribute that represents entitlements in the web service connector. Then, when you request any entitlement web service connector add/remove operation, the entitlement value is stored in the attribute. For example, if is an entitlement you have groups defined in the application schema, you can get the add entitlement operation using “$plan.groups$”.

Thanks,

PVR.

---

<div class="post-metadata">

**Author:** ![ninosp](https://avatars.discourse-cdn.com/v4/letter/n/ba9def/32.png) [@ninosp](https://developer.sailpoint.com/discuss/u/ninosp)\
**Post date:** [March 3, 2026, 8:12am UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/3 "2026-03-03T08:12:40Z")

</div>

Yes I detailed this in my question, that is one way. I’m asking for a third way but I doubt it is supported.

---

<div class="post-metadata">

**Author:** ![Peddapolu](https://avatars.discourse-cdn.com/v4/letter/p/b38774/32.png) [@Peddapolu](https://developer.sailpoint.com/discuss/u/Peddapolu)\
**Post date:** [March 3, 2026, 2:15pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/4 "2026-03-03T14:15:31Z")

</div>

@ninosp,

Can you share more context on this request? What are you trying to do?

Thanks,

PVR.

---

<div class="post-metadata">

**Author:** ![neel193](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/neel193/32/34038_2.png) [@neel193](https://developer.sailpoint.com/discuss/u/neel193)\
**Post date:** [March 3, 2026, 2:37pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/5 "2026-03-03T14:37:31Z")

</div>

@ninosp AFAIK you can only use the methods by getting plan → accountrequest → attributerequest only. There is no other direct way available.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 2, 2026, 2:37pm UTC](https://developer.sailpoint.com/discuss/t/use-plan-entitlementattr-programmatically/198018/6 "2026-05-02T14:37:47Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.