Removing a inactive user from application role

[smitg]

Hi team,

We have to remove an inactive user from application role. 
Problem is user is removed from associated entitlement directly in AD from some other process but role is still associated with user.

When we try to remove user either from user profile or role, request is creating but user not removed after approval.

How can we remove user from role?

Thanks,
Smitha

[armaanzahir]

Hi Smitha,

You may not be able to achieve this using the createrequest or the removerole api as they seem to not be working on inactive users.

The workaround for this would be to create an actionable analytic to remove the roles from these inactive identities.

You may modify the above query to fetch results only for the userset desired by adding those conditions. 

Actioning on this analytic will directly de provision the role without creating the request. The audit information would be available in this analytic though.

Ref: Configuring Allowed Actions (saviyntcloud.com)

Solved: Unable to Remove Inactive User from Role using API - Saviynt Forums - 43563

Thanks,

Armaan