Workflow to remove all access profiles that start with "Azure"

[colin_mckibben]

There’s a couple of ways you can approach this. You could make sure your Get Access action only returns access profiles.

And then configure your Manage Access to match access items that start with “Azure” by using regex in your JSONpath expression.

$.getAccess.accessItems[?(@.name =~ /Azure.*/i)]

Alternatively, you could look into this show and tell as a source of inspiration.

Workflow to remove access by identity based on special conditions

Problem Sometimes, it is desirable to remove access to an identity based on special criteria. For example, you may only wish to remove all entitlements from a JDBC source for an identity that has changed departments. Using the “Get Access” and “Manage Access” actions will not work in this scenario since “Get Access” does not have the ability to filter access for an identity based on arbitrary criteria, like source name. Instead, you have to use the HTTP Request action to manually invoke the…