Using Expansion vs Role Removal to determine when access was removed

brookesim95 · October 3, 2025, 5:17am

I want to understand when the user would have lost access to what the first role / entitlement enables. Would it have been the expansion date or the role removal date?

I have tried to replicate this scenario but all other cases the expansion and role removal have occurred at the same time (even with manual integrations included).

kumarSinghM · October 3, 2025, 8:01am

Hi @brookesim95

Could you please provide a screenshot of the access request for this use case, as it is not being cleared by the Excel document?

Topic		Replies	Views
Issue with access Request revocation date SHF Discussion and Questions sailpoint-identity-security , access-requests	0	188	July 15, 2024
Is there a search query to get all the identities whose entitlement access is going to expire in certain date range? SHF Discussion and Questions sailpoint-identity-security , search , access	8	698	November 22, 2024
Role Entitlement Removal SHF Discussion and Questions sailpoint-identity-security , provisioning , roles , access-profiles , entitlements	15	2761	July 30, 2024
Checking Role removeDate via API SHF Discussion and Questions apis , sailpoint-identity-security , roles	3	282	January 18, 2024
Is there a search query to get identies for which entitlement has been removed because of expiration set? SHF Discussion and Questions sailpoint-identity-security , search , entitlements	5	415	May 22, 2024

Using Expansion vs Role Removal to determine when access was removed

Related topics