Entitlements are not removing for AD privileged accounts

Lifecycle & Governance
, ,
1

The app name is ADP but it is same like AD with different OU was used. I have added the provisioning plan for removing memberof for ADP applications, adding one step in leaver workflow, I am testing the plan in debug page, while testing the plan the user for application tab it is removing memberof for the users but in entitlements tab the memberof is not removing, coming with error entitlements does not exists. After refresh it is adding again memberof for that users. Can some one help me how to remove that entitlements.

How to add steps in workflow in leaver. When user is disabled it should remove membeof for that ADP applications, can some one help me for this.

Attached screenshot for reference.

plan before changing the OU, so it was picking up but now the user for the application tab with memberof has removed but the entitlements tab was not removing for that user. when I am refreshing tasks it was adding automatically. can anyone help us. why the entitlements was not removing in the entitlements tab.

attached screenshot for reference.

Entitlements_memberof_not removing.png
Entitlements_memberof_not removing.png247×176 8.99 KB

2

Seems like sticky entitlement issue. There are post on how to handle them.
You can confirm that by looking at the identity from debug, you should see attribute assignments even after removing the entitlement. That’s what add it back during refresh.
Another option is to use batch to remove it completely.

3

Hi sanjay,

yes, you are correct , the attribute assignments are not removed, when I checked for that user in debug page. how to handle in this situation in leaver workflow, can you help me to share some sample code so that I will try to check that. how to use batch to remove it, can you guide me steps.