# Restricting user to request only one entitlement from Manage Access

**URL:** <https://developer.sailpoint.com/discuss/t/restricting-user-to-request-only-one-entitlement-from-manage-access/218891>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq\
**Created:** [August 13, 2026, 4:17pm UTC](https://developer.sailpoint.com/discuss/t/restricting-user-to-request-only-one-entitlement-from-manage-access/218891 "2026-08-13T16:17:34Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [August 17, 2026, 7:35am UTC](https://developer.sailpoint.com/discuss/t/restricting-user-to-request-only-one-entitlement-from-manage-access/218891/10 "2026-08-17T07:35:48Z")

</div>

Hello Sruthi. On the message, the “Policy Violations will occur” banner is the standard warning. It is not replaced by the custom violation description. The requester can click the violation to view its available details ([docs](https://documentation.sailpoint.com/identityiq/help/lifecycle_manager/manage_user_access.html)). You can set the violation description with `setDescription(...)` and associate the constraint with `setConstraint(constraint)`, as shown in this [Advanced Policy example](https://developer.sailpoint.com/discuss/t/advanced-policy-violation-rule/69084).

For the repeated review page, the rule should return `null` once the projected state no longer violates the policy. I would log the projected entitlement count after the user removes one entitlement and confirm the rule is no longer creating a `PolicyViolation`.

Also, avoid calling `remove()` or `removeAll()` directly on collections returned from the projected `identity`, since that can modify the future identity object used by later evaluations. Copy the values into a separate list first and compare there ([reference](https://developer.sailpoint.com/discuss/t/identity-in-advanced-policy-violation-rule/197971)).

---

_[View the full topic](https://developer.sailpoint.com/discuss/t/restricting-user-to-request-only-one-entitlement-from-manage-access/218891)._