Change Requests that grant or remove user access remain in a Pending Verification state after the relevant collections have been run. AFX indicates that the access was provisioned/removed to/from the data source and there are no errors in the aveksaServer.log or the AFX logs to indicate otherwise. A check of the data source shows that the added access is NOT in the data source or the removed access has not been removed from the data source.
Between the time that AFX added the access and the time a collection was run to verify the access, the access was manually removed from the data source, or,
Between the time that AFX removed the access and the time a collection was run to verify the access removal, the access was added back to the user.
Make sure access is not manually added/removed from data sources that are provisioned using AFX.
Use manual fulfillment instead of AFX which would require the manual fulfillment of the entitlement.