Remove access from workflow

Actually, I think I can tell which role is causing it from the error. The role “EXT-TestAADRole3” can’t be removed from the identity ID ending in “486”. You could even try submitting this access request from the IDN request center for just that identity and that role and see what happens.