I am able to remove account from AD Security group via webservice, Account change, remove account from group. However, unable to process same via Remove access form. We have a IGL Request form with the entitlement selector table field type. But, when we submit the request selecting the group entitlement derived from user account; the request is failing. seems this is because the change type in request is User change -- RemoveUserFromGroup. request help in resolving the same.
We are using default AFX Fulfillment workflow.