# Managing AD entitlements in SailPoint IDN

**URL:** <https://community.sailpoint.com/discuss/t/managing-ad-entitlements-in-sailpoint-idn/33813>\
**Category:** Lifecycle & Governance\
**Tags:** microsoft-active-directory, accounts-entitlements, access-modeling\
**Created:** [May 16, 2024, 10:45am UTC](https://community.sailpoint.com/discuss/t/managing-ad-entitlements-in-sailpoint-idn/33813 "2024-05-16T10:45:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ananthiv](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@ananthiv](https://community.sailpoint.com/discuss/u/ananthiv)\
**Post date:** [May 16, 2024, 10:45am UTC](https://community.sailpoint.com/discuss/t/managing-ad-entitlements-in-sailpoint-idn/33813/1 "2024-05-16T10:45:35Z")

</div>

Hello,

We have a requirement to manage Access request for the existing AD group with members already provisioned to those AD groups. Currently we are just Aggregating those entitlements to our SailPoint IDN and we can see the users who have access to those entitlements in AD.

Could you please help us with the approach to manage the existing user’s access for example revoking access for already provisioned users in AD and new members provisioning to those AD groups without migrating manually to SailPoint IDN Roles/Access Profile?

Regards,

Ananthi V

---

<div class="post-metadata">

**Author:** ![paulo\_urcid](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@paulo\_urcid](https://community.sailpoint.com/discuss/u/paulo_urcid)\
**Post date:** [May 17, 2024, 8:00pm UTC](https://community.sailpoint.com/discuss/t/managing-ad-entitlements-in-sailpoint-idn/33813/2 "2024-05-17T20:00:08Z")

</div>

The AD groups (entitlements) can be marked as “requestable” so that end users can raise an Access Request for them. To remove existing AD groups from users, currently managers can request the removal of access for their direct reports, or an Org Admin can request the removal for any other identity.

See:

> **[Individual Entitlement Updates - Managing Entitlements - SailPoint Identity...](https://documentation.sailpoint.com/saas/help/access/entitlements.html#individual-entitlement-updates)**
>
> Entitlements are the access rights an account has on a source. They're a key part of identity governance and an important way of quantifying access. They can be: | SailPoint Identity Services Documentation

> **[Ways to Revoke Entitlements - Managing Entitlements - SailPoint Identity...](https://documentation.sailpoint.com/saas/help/access/entitlements.html#ways-to-revoke-entitlements)**
>
> Entitlements are the access rights an account has on a source. They're a key part of identity governance and an important way of quantifying access. They can be: | SailPoint Identity Services Documentation

[Configuring Access Requests for Entitlements - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/requests/config_entitlements.html)