Remove access from workflow

[colin_mckibben]

Does the identity currently have both roles? There is a quirk with the access request API, which Manage Access is based on, where it will fail if you attempt to revoke a role that doesn’t exist on the identity.