I’m following along with Workflow - Remove Entitlements from selected source - #8 , but I have a slightly different requirement. Instead of revoking all entitlements for a particular source, I want to invoke all entitlements for multiple sources that share a tag. Any suggestions on this ?

I looked into this further, and I don’t think you can accomplish this with a single workflow. I think you’ll need two. The first workflow will look like this. [image] It retains most of the logic you already have, with HTTP Request 2 fetching the list of sources by tag name. The only differenc…

The response object for searching identities doesn’t provide tags for a source, only source ID and source name. You can read more about the available data in the search response here: Searchable Fields - SailPoint Identity Services . You can try calling the list tagged objects API first to get all …

Thank you for responding back, @colin_mckibben . Is there a way to put 2 HTTP Request Actions in the Loop Input ? From Action 1: $.hTTPRequest.body[0].access[?(@.type == “ENTITLEMENT”)] From Action 2: $.hTTPRequest1.body.objectRef.id

Yea, that’s possible. Is it not working? What have you tried so far?

Hi @colin_mckibben We’re tried : $.hTTPRequest.body[0].access[?(@.type == "ENTITLEMENT")] && $.hTTPRequest1.body.objectRef.id But this is invalid JSONPath expression.

I need to see your workflow to know where the HTTP requests are in your workflow and where you are attempting to call them. Can you share an image of it and the workflow script itself?

Hi @colin_mckibben , Attaching Images and script of workflow for your review: [TerminationRevokeentitlementsbysourcetag20230712] Thanks a million for all the support and guidance received! TerminationRevokeentitlementsbysourcetag20230712.json (3.2 KB)

How can we call second workflow from first workflow where we are looping with source ids, can you give us the snippet please that would help a lot! Also in External Trigger of second workflow what would be the input?

Hi @colin_mckibben , Thanks for looking into it. We’ve tried but unable to get tagged objects with Path Variable (type: SOURCE). If we’re putting this Path Variable into Query Parameter, it doesn’t seem to be working as it’s returning all tagged objects. Any suggestions on this?

[image] Nisha Usman: We’ve tried but unable to get tagged objects with Path Variable (type: SOURCE). If we’re putting this Path Variable into Query Parameter, it doesn’t seem to be working as it’s returning all tagged objects. Try this for your query param. You can add any number of tags wit…

[image] Aditi Majumdar: How can we call second workflow from first workflow where we are looping with source ids, can you give us the snippet please that would help a lot! Also in External Trigger of second workflow what would be the input? You can follow this show and tell by @chazeauc to le…

Workflow - Remove entitlements from sources with a specific tag

Identity Security Cloud (ISC) ISC Discussion and Questions

colin_mckibben (Colin McKibben) July 13, 2023, 12:58pm 11

Try this for your query param. You can add any number of tags within the parenthesis.

key = filters
value = objectRef.type eq "SOURCE" and tagName in ("SECURE","RISKY")

It will look like this:

Topic		Replies	Views
Workflow - Remove Entitlements from selected source ISC Discussion and Questions workflows , identity-security-cloud , entitlements	19	2569	October 24, 2023
Workflow to remove access by identity based on special conditions ISC Community Knowledge Base workflows , identity-security-cloud	14	1902	August 7, 2025
Workflow - Remove Entitlements from multiple sources ISC Discussion and Questions workflows , identity-security-cloud , entitlements	4	137	April 20, 2025
Termination workflow to remove requestable access profiles and roles ISC Discussion and Questions workflows , identity-security-cloud , access-requests	7	534	November 9, 2024
Workflow - HTTP GET Request Action ISC Discussion and Questions workflows , identity-security-cloud	8	961	April 20, 2024

Workflow - Remove entitlements from sources with a specific tag

Related topics