Can you try $[?(@.source.name == "Active Directory")] and use Compare step to check if the removed entitlement matches your target value? Also, this is a great resource: Native Change Detection Using Workflows
Can you try $[?(@.source.name == "Active Directory")] and use Compare step to check if the removed entitlement matches your target value? Also, this is a great resource: Native Change Detection Using Workflows