Hi Ryan!
I could not iterate with the getAccess action result. Instead I have used an API search to retrieve all data from some identity, including the accesses. I used it to remove all entitlements of some user, detailed is here:
In your case, you should remove the http request action that is inside loop, change the loop filter by something like:
$.hTTPRequest.body[0].access[?(@.attribute == “yourattribute” && @.type == “ENTITLEMENT” && @.source.name == “Active Directory”)]
so then, if you have a multivalued AD attribute “yourattribute”, containging the users you have to filter, you can perform some logic inside Loop.