# Lifecycle & Governance **URL:** https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=2 [Latest](https://community.sailpoint.com/discuss/latest.md) · [Categories](https://community.sailpoint.com/discuss/categories.md) · [Tags](https://community.sailpoint.com/discuss/tags.md) **Page:** 3 --- ## [Removing access from role does not create work item](https://community.sailpoint.com/discuss/t/removing-access-from-role-does-not-create-work-item/36374)
**Author:** [@sgalbraith](https://community.sailpoint.com/discuss/u/sgalbraith)\ **Replies:** 4\ **Last updated:** [June 20, 2025, 6:42pm UTC](https://community.sailpoint.com/discuss/t/removing-access-from-role-does-not-create-work-item/36374 "2025-06-20T18:42:26Z")
We have access for individuals tracked on a role assignment. Working through a clean up project for each role and access. When we remove a system from the role there is not a work item created. The work item created trig… --- ## [Create account only in certain circumstances](https://community.sailpoint.com/discuss/t/create-account-only-in-certain-circumstances/36310)
**Author:** [@pillar224](https://community.sailpoint.com/discuss/u/pillar224)\ **Replies:** 4\ **Last updated:** [June 6, 2025, 10:36pm UTC](https://community.sailpoint.com/discuss/t/create-account-only-in-certain-circumstances/36310 "2025-06-06T22:36:32Z")
I want to create an account when a new Identity is created only under certain circumstances. For example, if an Identity’s department is x then create an account on x Source --- ## [Access fullfillment not working on file server agent](https://community.sailpoint.com/discuss/t/access-fullfillment-not-working-on-file-server-agent/36263)
**Author:** [@ravikolipakulaaujas](https://community.sailpoint.com/discuss/u/ravikolipakulaaujas)\ **Replies:** 4\ **Last updated:** [June 1, 2025, 1:28pm UTC](https://community.sailpoint.com/discuss/t/access-fullfillment-not-working-on-file-server-agent/36263 "2025-06-01T13:28:14Z")
Hi All, We have a requirement of Access fullfilment using File Server Agent. When I requested for an access on the folder. Approval process completed successfully however access fullfilment(not relevant) is showing … --- ## [Configuring Username Writeback to Workday Based on Start Date in SailPoint ISC](https://community.sailpoint.com/discuss/t/configuring-username-writeback-to-workday-based-on-start-date-in-sailpoint-isc/36245)
**Author:** [@Divya\_B25](https://community.sailpoint.com/discuss/u/Divya_B25)\ **Replies:** 2\ **Last updated:** [June 4, 2025, 8:29am UTC](https://community.sailpoint.com/discuss/t/configuring-username-writeback-to-workday-based-on-start-date-in-sailpoint-isc/36245 "2025-06-04T08:29:15Z")
Hi Team, We have integrated Workday with SailPoint IdentityNow, and currently, all Active and Pre-hire users are being aggregated in ISC. We are exploring options to set up the writeback functionality for the username … --- ## [Manage account expiry for AD admin accounts](https://community.sailpoint.com/discuss/t/manage-account-expiry-for-ad-admin-accounts/36238)
**Author:** [@Saurabh-Kumar](https://community.sailpoint.com/discuss/u/Saurabh-Kumar)\ **Replies:** 2\ **Last updated:** [May 24, 2025, 11:00am UTC](https://community.sailpoint.com/discuss/t/manage-account-expiry-for-ad-admin-accounts/36238 "2025-05-24T11:00:50Z")
Hi, I have 2 AD sources - one provisioning standard AD account, another one provisioning Admin account. As per policy, admin accounts expiry can be maximum 6 months. This can only be extended 1 month before the expiry … --- ## [How to get Visibility on Emails Sent via Workflow](https://community.sailpoint.com/discuss/t/how-to-get-visibility-on-emails-sent-via-workflow/36231)
**Author:** [@SeanK-W](https://community.sailpoint.com/discuss/u/SeanK-W)\ **Replies:** 10\ **Last updated:** [June 2, 2025, 9:38pm UTC](https://community.sailpoint.com/discuss/t/how-to-get-visibility-on-emails-sent-via-workflow/36231 "2025-06-02T21:38:21Z")
Morning ISC community, We have a workflow that sends emails to users (utilising the feature to allow us to ‘send as’ a different email address than no-reply@). Does anybody know how I can get visibility showing that em… --- ## [Controlling Attribute Sync Based on Start Date in SailPoint IdentityNow Integration with Workday](https://community.sailpoint.com/discuss/t/controlling-attribute-sync-based-on-start-date-in-sailpoint-identitynow-integration-with-workday/36226)
**Author:** [@Divya\_B7](https://community.sailpoint.com/discuss/u/Divya_B7)\ **Replies:** 2\ **Last updated:** [May 22, 2025, 4:41pm UTC](https://community.sailpoint.com/discuss/t/controlling-attribute-sync-based-on-start-date-in-sailpoint-identitynow-integration-with-workday/36226 "2025-05-22T16:41:07Z")
Hi, Is there a way to control the sync of certain attributes based on specific conditions? For example, once a user is onboarded into ISC from the Workday source as a pre-hire, a network ID is generated for the user. Ho… --- ## [Writing Back UPN and Network ID to Workday from IDN](https://community.sailpoint.com/discuss/t/writing-back-upn-and-network-id-to-workday-from-idn/36209)
**Author:** [@Divya\_B7](https://community.sailpoint.com/discuss/u/Divya_B7)\ **Replies:** 2\ **Last updated:** [May 21, 2025, 6:59pm UTC](https://community.sailpoint.com/discuss/t/writing-back-upn-and-network-id-to-workday-from-idn/36209 "2025-05-21T18:59:59Z")
I would like to confirm whether SailPoint supports writing back both the Network ID and the User Principal Name (UPN) to Workday for hourly employees after these attributes are generated during provisioning. Also, Are t… --- ## [Create Account Provisioning Policy for SAP Fieldglass](https://community.sailpoint.com/discuss/t/create-account-provisioning-policy-for-sap-fieldglass/36186)
**Author:** [@CeeJ](https://community.sailpoint.com/discuss/u/CeeJ)\ **Replies:** 3\ **Last updated:** [May 21, 2025, 7:13am UTC](https://community.sailpoint.com/discuss/t/create-account-provisioning-policy-for-sap-fieldglass/36186 "2025-05-21T07:13:41Z")
Hi Team, I’m working on SAP Fieldglass connector and I’m using the Create Account provisioning policy to populate attributes to push to Fieldglass. However, the values I’m going to use are not available in identity attr… --- ## [Send Certification Tasks to RoleOwners](https://community.sailpoint.com/discuss/t/send-certification-tasks-to-roleowners/36146)
**Author:** [@tom\_hanse](https://community.sailpoint.com/discuss/u/tom_hanse)\ **Replies:** 3\ **Last updated:** [May 13, 2025, 5:32am UTC](https://community.sailpoint.com/discuss/t/send-certification-tasks-to-roleowners/36146 "2025-05-13T05:32:25Z")
When a certified identity is member of a specific role, a certification task should be sent to each of the identities’ roles RoleOwners, instead of the identities’ manager. We have tried to solve this using the Certific… --- ## [Looking for assistance with configuring an event trigger filter for Entra ID account provisioning](https://community.sailpoint.com/discuss/t/looking-for-assistance-with-configuring-an-event-trigger-filter-for-entra-id-account-provisioning/36118)
**Author:** [@SwathiPrasanna](https://community.sailpoint.com/discuss/u/SwathiPrasanna)\ **Replies:** 6\ **Last updated:** [July 9, 2025, 12:33am UTC](https://community.sailpoint.com/discuss/t/looking-for-assistance-with-configuring-an-event-trigger-filter-for-entra-id-account-provisioning/36118 "2025-07-09T00:33:47Z")
I’m trying to configure an Event Trigger that only fires for account creation events specifically for the “Microsoft EntraID - Cloud Only Accounts” source. So far, I’m facing issues filtering the data as expected. Here’… --- ## [Global variables in ISC workflows](https://community.sailpoint.com/discuss/t/global-variables-in-isc-workflows/36099)
**Author:** [@IAM\_Tanay](https://community.sailpoint.com/discuss/u/IAM_Tanay)\ **Replies:** 3\ **Last updated:** [May 2, 2025, 8:50pm UTC](https://community.sailpoint.com/discuss/t/global-variables-in-isc-workflows/36099 "2025-05-02T20:50:33Z")
Is there a way I can define a variable globally in ISC workflows. For ex - If define a variable in first step of the workflow & then I want to modify value in that variable based on a Compare String operator in a later … --- ## [Outliers and Peer Group Detection — Can We Control Which Attributes Are Used?](https://community.sailpoint.com/discuss/t/outliers-and-peer-group-detection-can-we-control-which-attributes-are-used/36057)
**Author:** [@Faryuxx](https://community.sailpoint.com/discuss/u/Faryuxx)\ **Replies:** 9\ **Last updated:** [April 29, 2025, 3:41pm UTC](https://community.sailpoint.com/discuss/t/outliers-and-peer-group-detection-can-we-control-which-attributes-are-used/36057 "2025-04-29T15:41:22Z")
Hi all, While working with Access Insights and querying /iai/outliers, I noticed that peer group creation and outlier detection seem to rely heavily on identity attributes like location, department, and jobTitle. The i… --- ## [Update AD Account Attributes Through SailPoint Workflows](https://community.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/36041)
**Author:** [@UjjwalJain](https://community.sailpoint.com/discuss/u/UjjwalJain)\ **Replies:** 6\ **Last updated:** [April 24, 2025, 12:49pm UTC](https://community.sailpoint.com/discuss/t/update-ad-account-attributes-through-sailpoint-workflows/36041 "2025-04-24T12:49:26Z")
We are exploring the capability to update the ‘account expiration’ attribute on Active Directory (AD) for a user based on input collected through SailPoint Forms. However, we’ve encountered a challenge: there doesn’t app… --- ## [ISC Entra ID connector set eligible role assignment's end date as "permanent" in provisioning policy](https://community.sailpoint.com/discuss/t/isc-entra-id-connector-set-eligible-role-assignments-end-date-as-permanent-in-provisioning-policy/36007)
**Author:** [@mjos](https://community.sailpoint.com/discuss/u/mjos)\ **Replies:** 3\ **Last updated:** [April 23, 2025, 8:17am UTC](https://community.sailpoint.com/discuss/t/isc-entra-id-connector-set-eligible-role-assignments-end-date-as-permanent-in-provisioning-policy/36007 "2025-04-23T08:17:04Z")
Hello All, Currently, the end date for Entra ID PIM eligible role assignments is set to one year from the role assignment date by default. However by going through the documentation of the ISC Entra ID connector provis… --- ## [Is It Possible to Add Attachments to Send Email Action in Workflow?](https://community.sailpoint.com/discuss/t/is-it-possible-to-add-attachments-to-send-email-action-in-workflow/35988)
**Author:** [@SeanK-W](https://community.sailpoint.com/discuss/u/SeanK-W)\ **Replies:** 3\ **Last updated:** [April 17, 2025, 12:48am UTC](https://community.sailpoint.com/discuss/t/is-it-possible-to-add-attachments-to-send-email-action-in-workflow/35988 "2025-04-17T00:48:57Z")
Hi ISC community, As the subject of this discussion asks, is it possible to add attachments to send email action in workflow? Specifically trying to attach a pdf. The only way I can think of is to have the file hosted … --- ## [Detection of role](https://community.sailpoint.com/discuss/t/detection-of-role/35971)
**Author:** [@neil\_syphers](https://community.sailpoint.com/discuss/u/neil_syphers)\ **Replies:** 3\ **Last updated:** [April 11, 2025, 7:16am UTC](https://community.sailpoint.com/discuss/t/detection-of-role/35971 "2025-04-11T07:16:24Z")
We are able to have IT roles detected for users upon identity refresh. However, we don’t see the business role getting detected when a user has the IT role. I see that some of the business roles have been configured to… --- ## [How do we avoid same event trigger for the same identity](https://community.sailpoint.com/discuss/t/how-do-we-avoid-same-event-trigger-for-the-same-identity/35931)
**Author:** [@nursyafinazmdyusoff](https://community.sailpoint.com/discuss/u/nursyafinazmdyusoff)\ **Replies:** 1\ **Last updated:** [April 11, 2025, 7:17pm UTC](https://community.sailpoint.com/discuss/t/how-do-we-avoid-same-event-trigger-for-the-same-identity/35931 "2025-04-11T19:17:07Z")
Hi Team, I remember last time there was an entry key that we can enable from Refresh Identity Cube task to prevent same event trigger for identity but not able to find any paper on this. Anyone have any idea on this? Is… --- ## [Entitlements are not removing for AD privileged accounts](https://community.sailpoint.com/discuss/t/entitlements-are-not-removing-for-ad-privileged-accounts/35528)
**Author:** [@sangeethaallison](https://community.sailpoint.com/discuss/u/sangeethaallison)\ **Replies:** 2\ **Last updated:** [February 3, 2025, 5:34am UTC](https://community.sailpoint.com/discuss/t/entitlements-are-not-removing-for-ad-privileged-accounts/35528 "2025-02-03T05:34:55Z")
The app name is ADP but it is same like AD with different OU was used. I have added the provisioning plan for removing memberof for ADP applications, adding one step in leaver workflow, I am testing the plan in debug pag… --- ## [Extended Role Attribute Identity Value](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502)
**Author:** [@otawakol](https://community.sailpoint.com/discuss/u/otawakol)\ **Replies:** 2\ **Last updated:** [January 30, 2025, 3:08pm UTC](https://community.sailpoint.com/discuss/t/extended-role-attribute-identity-value/35502 "2025-01-30T15:08:21Z")
Hello all! We have an extended role attribute of type “Identity” where we assign users to specific roles as a role custodian. The issue we have been running into is that if that user leaves and the cube is pruned, th… --- ## [How to invoke a workflow?](https://community.sailpoint.com/discuss/t/how-to-invoke-a-workflow/35303)
**Author:** [@dyoon](https://community.sailpoint.com/discuss/u/dyoon)\ **Replies:** 2\ **Last updated:** [December 18, 2024, 3:25pm UTC](https://community.sailpoint.com/discuss/t/how-to-invoke-a-workflow/35303 "2024-12-18T15:25:05Z")
I cloned a workflow named “test - LCM Provisioning” out of OOB “LCM Provisioning” workflow via debug. I learned a while back that from Manage User Access, by making a role request which in turn kicks off OOB “LCM Provis… --- ## [FAM Access Fulfilment trigger](https://community.sailpoint.com/discuss/t/fam-access-fulfilment-trigger/35179)
**Author:** [@smundu](https://community.sailpoint.com/discuss/u/smundu)\ **Replies:** 2\ **Last updated:** [December 6, 2024, 6:16am UTC](https://community.sailpoint.com/discuss/t/fam-access-fulfilment-trigger/35179 "2024-12-06T06:16:12Z")
Hi All, I have noticed Access fulfilment gets triggered only after we end campaign. Is there a way to trigger access fulfilment so that if reviewer has revoked the access and completed the review then access fulfilment … --- ## [Identity Attribute change event keep getting triggered.](https://community.sailpoint.com/discuss/t/identity-attribute-change-event-keep-getting-triggered/35099)
**Author:** [@DineshSB](https://community.sailpoint.com/discuss/u/DineshSB)\ **Replies:** 3\ **Last updated:** [January 2, 2025, 12:30pm UTC](https://community.sailpoint.com/discuss/t/identity-attribute-change-event-keep-getting-triggered/35099 "2025-01-02T12:30:26Z")
Hi Sailors, We have implemented multiple mover workflows based on attribute changes. Previously, these workflows were functioning correctly. However, since last week, we have observed the following issues: 1. Intermitt… --- ## [Can we exclude entitlements from Certification Campaigns created via Workflows?](https://community.sailpoint.com/discuss/t/can-we-exclude-entitlements-from-certification-campaigns-created-via-workflows/34974)
**Author:** [@SeanK-W](https://community.sailpoint.com/discuss/u/SeanK-W)\ **Replies:** 2\ **Last updated:** [October 29, 2024, 9:31pm UTC](https://community.sailpoint.com/discuss/t/can-we-exclude-entitlements-from-certification-campaigns-created-via-workflows/34974 "2024-10-29T21:31:26Z")
Hello IDN Community, Question: Is it possible to exclude a single entitlement from being included in a campaign which is created via a workflow? For eg, could I add a campaign filter (which would exclude the entitlemen… --- ## [Can't revoke access through a certification campaign](https://community.sailpoint.com/discuss/t/cant-revoke-access-through-a-certification-campaign/34894)
**Author:** [@khalilgahbiche](https://community.sailpoint.com/discuss/u/khalilgahbiche)\ **Replies:** 4\ **Last updated:** [October 16, 2024, 4:20pm UTC](https://community.sailpoint.com/discuss/t/cant-revoke-access-through-a-certification-campaign/34894 "2024-10-16T16:20:12Z")
Dear all, One of our users complained about not being able to revoke a role through a certification campaign. The only options available are “Aknowledge” and “Reassign”. The role is marked as non requestable, which, I … --- ## [IdentityNow Automatic Provisioning](https://community.sailpoint.com/discuss/t/identitynow-automatic-provisioning/34873)
**Author:** [@mihaela\_andrei](https://community.sailpoint.com/discuss/u/mihaela_andrei)\ **Replies:** 4\ **Last updated:** [October 20, 2024, 8:15pm UTC](https://community.sailpoint.com/discuss/t/identitynow-automatic-provisioning/34873 "2024-10-20T20:15:22Z")
Hello, I am struggling to configure automatic provisioning in IdentityNow, and I would appreciate very much if you could help. As a side note, I am new to IdentityNow product, but I have previous IAM experience with oth… --- ## [Access Profiles from Delimited Source](https://community.sailpoint.com/discuss/t/access-profiles-from-delimited-source/34756)
**Author:** [@ayeshashahu](https://community.sailpoint.com/discuss/u/ayeshashahu)\ **Replies:** 1\ **Last updated:** [September 27, 2024, 8:49pm UTC](https://community.sailpoint.com/discuss/t/access-profiles-from-delimited-source/34756 "2024-09-27T20:49:50Z")
Hi Team, We are using a Delimited File Connector for Manual Provisioning of a system. Connected to the CSV-source we have an application with requestable access-profiles. After a user requests access to an access profi… --- ## [AD Service account ownership transfer](https://community.sailpoint.com/discuss/t/ad-service-account-ownership-transfer/34732)
**Author:** [@mohanas](https://community.sailpoint.com/discuss/u/mohanas)\ **Replies:** 3\ **Last updated:** [September 25, 2024, 8:17pm UTC](https://community.sailpoint.com/discuss/t/ad-service-account-ownership-transfer/34732 "2024-09-25T20:17:29Z")
Has anyone worked on use case to automate AD service account ownership transfer? Lets a service account owner gets terminated, transfer the ownership to one-up manager and provide one-up manager an option either keep th… --- ## [Delete account when LifecycleState changes from inactive to leave10days](https://community.sailpoint.com/discuss/t/delete-account-when-lifecyclestate-changes-from-inactive-to-leave10days/34703)
**Author:** [@RitikaK](https://community.sailpoint.com/discuss/u/RitikaK)\ **Replies:** 1\ **Last updated:** [September 20, 2024, 6:24pm UTC](https://community.sailpoint.com/discuss/t/delete-account-when-lifecyclestate-changes-from-inactive-to-leave10days/34703 "2024-09-20T18:24:27Z")
Hi Team, I have created a workflow to delete an account when LifecylcleState changes to from Inactive to leave10days, My current config is: 1. Trigger workflow when state changes from inactive to leave10days 2. fet… --- ## [Unable to Challenge the revoker decision in Challenge period](https://community.sailpoint.com/discuss/t/unable-to-challenge-the-revoker-decision-in-challenge-period/34702)
**Author:** [@VeerenderB](https://community.sailpoint.com/discuss/u/VeerenderB)\ **Replies:** 3\ **Last updated:** [September 24, 2024, 11:24am UTC](https://community.sailpoint.com/discuss/t/unable-to-challenge-the-revoker-decision-in-challenge-period/34702 "2024-09-24T11:24:36Z")
Hi Sailers, We have enabled the challenge period. After revoke it is entered in to “Challenge” period and Challenge period notification also received. In that we have sailpoint link to challenge, when i opened it i can … [Previous page](https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=1) [Next page](https://community.sailpoint.com/discuss/c/automation-lifecycle/6.md?page=3)