# When inactive, remove entitlements or access profile

**URL:** <https://developer.sailpoint.com/discuss/t/when-inactive-remove-entitlements-or-access-profile/22437>\
**Category:** SHF Discussion and Questions\
**Tags:** workflows, identity-security-cloud, entitlements\
**Created:** [December 11, 2023, 6:41am UTC](https://developer.sailpoint.com/discuss/t/when-inactive-remove-entitlements-or-access-profile/22437 "2023-12-11T06:41:17Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [December 11, 2023, 12:54pm UTC](https://developer.sailpoint.com/discuss/t/when-inactive-remove-entitlements-or-access-profile/22437/2 "2023-12-11T12:54:43Z")

</div>

Hi @sec_tech ! I have this problem a couple of months ago, I could not get the Get Access/Manage Access work to achieve your objective, even putting the Manage Access inside a Loop.

I could do it with 2 HTTP Request actions, first one calls the IDN API to retrieve user’s entitlements, then put response in a Loop, and inside a the loop another HTTP Request which it calls IDN API to revoke entitlement.

I posted detailed solution here:

> [@Remove all entitlements with workflow](https://developer.sailpoint.com/discuss/t/remove-all-entitlements-with-workflow/16692/4):
>
> Hi Colin, sorry I forgot to return here. I was not able to get objective using the Get Access / Manage Access actions. Instead I replaced the Get Access with a HTTP action, calling the search api to find user entitlements, and then replaced Manage Access action with another HTTP action, this time removing each entitlement as a request. First HTTP Request JSON Body: { "indices": ["identities"], "query": { "query": "id:{…

---

_[View the full topic](https://developer.sailpoint.com/discuss/t/when-inactive-remove-entitlements-or-access-profile/22437)._