I have already raised similar post regarding this sticky entitlement issue, but I didn’t get any proper solution and most common suggestions provided are either to use before provisioning rule or creating access profiles.
How to remove entitlements granted via request on IDN - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community
I went with access profiles approach for access requesting to avoid this stickiness issue because before provisioning rule doesn’t fit for my integration. Also, by using access profile there will be operational overhead involved as there will be need of creating new profile for any new entitlement aggregated.
I would suggest you to go-head with the access profiles approach for access request if your application’s entitlements are fixed and less chance of new entitlements that would be aggregated.
Thank you.
Shanmukh Gali