Access Package Request Type ApproverRemove

Question

When triggering a Custom Extension during an Access Package flow that is assigned to run when Access is Removed if the removal occurs by the approver in the My Access portal rather than by an Admin in the Entra Admin center, the custom extension fails with the error

The call to custom extension Disable X Account failed, Error message : Requested value 'ApproverRemove' was not found..

Accoding to this https://learn.microsoft.com/en-us/graph/api/resources/accesspackageassignmentrequest?view=graph-rest-1.0 that is not a valid request type. How can I support an extension in this scenario?

Answer 1

R Dorman

When access is removed by an approver through the My Access portal, Entra ID Governance invokes the custom extension with an internal request type (ApproverRemove) that is not part of the documented Microsoft Graph requestType enum. This is expected behavior.

To support this scenario, custom extensions should not rely on requestType values alone. Instead, extensions should detect removal based on the access package assignment lifecycle (for example, assignment deletion or inactive state) and treat all removal workflows consistently, regardless of who initiated the removal.