Hello Everyone, We have a requirement to revoke only requestable roles and access profiles for terminated identities via Workflow. I’m using below API search query in "HTTP Request " operation to get the same. Unfortunately, it’s not returning me any identities. Could someone please help? { "i…

Hi Theja, Take a look at the /requestable-objects endpoint in SailPoint’s APIs. It lists the available requestable APs and Roles for a particular identity AND lets you know if they’re assigned. You could use this and loop through the assigned ones to revoke them in your workflow. list-re…

Hey, use this attribute in the query “revocable:true” best!

revocable: true, does this means that all are requestable ones? We have a scenario where the roles are getting revoked but access profile which was part of that role still exists in identities? (may be a bug) For this scenario I believe revocable will be false as the access profiles were encapsulat…

Hi Theja, Are you trying to process multiple identities in one workflow run? Or a single identity? After seeing Ivan’s response, I think using the ‘requestable: true’ query would be an easier solution. The high level workflow would look like this: Identity termination action trigger (eg. LCS ide…

Hi @liamkokeeffe , Scope is to process many identities. But this can be handled by setting limit in HTTP operation for API search query. I’ll have a try by adding “revocable: true” in query and check if it returns only the requestable objects.

Hi Theja, The query will be requestable:true. Do not believe revocable is an attribute you can search on. Thanks, Liam

For revocable query in a workflow, try using the below step "actionId": "sp:http", "attributes": { "authenticationType": "OAuth", "jsonRequestBody": { "indices": [ "identities…

Thanks @margocbain , @liamkokeeffe . I have used below query to get only the requestable roles. It is working fine in Postman if I give the identity Id value manually. But it’s not working inside the loop. It’s not able to get the identity Ids inside the loop. (FYI…I can see the Identities Ids being …

Are you passing $ context to loop if not, pass the context.

Workflow to revoke only Requestable roles and access profiles

Identity Security Cloud (ISC) ISC Discussion and Questions

JackSparrow (Theja C) November 9, 2024, 1:59pm 3

Thanks @liamkokeeffe . Can we pass dynamic values in request parameters? As the HTTP request is inside the loop, want to know how to pass the identity id for the GET request

Topic		Replies	Views
HTTP request for revoke action - Workflow ISC Discussion and Questions workflows , identity-security-cloud	4	108	January 18, 2025
How to remove roles from the user using workflow? ISC Discussion and Questions workflows , identity-security-cloud	9	192	August 23, 2025
Search API - Workflow HTTP Request Action ISC Discussion and Questions workflows , identity-security-cloud	5	412	June 29, 2024
Termination workflow to remove requestable access profiles and roles ISC Discussion and Questions workflows , identity-security-cloud , access-requests	7	535	November 9, 2024
Workflow to remove access by identity based on special conditions ISC Community Knowledge Base workflows , identity-security-cloud	14	1905	August 7, 2025

Workflow to revoke only Requestable roles and access profiles

Related topics