Remove user access granted without requesting role

[yogesh]

What would be the best way to remove the user entitlements in case they were assigned to user without a role?

For example, entitlementA is part of roleA and user gets entitlementA from backend or without requesting from Saviynt then we have to remove the entitlementA from user's account.

[yogesh]

I have found a helpful topic on this problem and will update this thread in case I see any issues:
https://docs.saviyntcloud.com/bundle/KBAs/page/Content/Configuring-the-detection-of-out-of-band-acce...

[rushikeshvartak]

Create actionable report to remove such rogue entries (access added outside saviynt)