Merge pull request #172995 from markwahl-msft/mwahl-em-reqdel

EM: add remove of a request

Author: ShannonLeavitt

articles/active-directory/governance/TOC.yml

@@ -92,7 +92,7 @@
         href: entitlement-management-access-package-lifecycle-policy.md
       - name: Configure separation of duties
         href: entitlement-management-access-package-incompatible.md
-      - name: View requests
+      - name: View and remove requests
         href: entitlement-management-access-package-requests.md
       - name: Reprocess requests
         href: entitlement-management-reprocess-access-package-requests.md

articles/active-directory/governance/entitlement-management-access-package-requests.md

@@ -1,6 +1,6 @@
 ---
-title: View requests for an access package in Azure AD entitlement management - Azure Active Directory
-description: Learn how to view requests for an access package in Azure Active Directory entitlement management.
+title: View and remove requests for an access package in Azure AD entitlement management - Azure Active Directory
+description: Learn how to view requests and remove for an access package in Azure Active Directory entitlement management.
 services: active-directory
 documentationCenter: ''
 author: ajburnle
@@ -12,7 +12,7 @@ ms.tgt_pltfrm: na
 ms.devlang: na
 ms.topic: how-to
 ms.subservice: compliance
-ms.date: 12/23/2020
+ms.date: 9/20/2021
 ms.author: ajburnle
 ms.reviewer: 
 ms.collection: M365-identity-device-management
@@ -21,9 +21,9 @@ ms.collection: M365-identity-device-management
 #Customer intent: As an access package manager, I want detailed information about requests for access packages so that I can view the status and troubleshoot any issues.
 
 ---
-# View requests for an access package in Azure AD entitlement management
+# View and remove requests for an access package in Azure AD entitlement management
 
-In Azure AD entitlement management, you can see who has requested access packages, their policy, and status. This article describes how to view requests for an access packages.
+In Azure AD entitlement management, you can see who has requested access packages, their policy, and status. This article describes how to view requests for an access package, and remove requests that are no longer needed.
 
 ## View requests
 
@@ -39,8 +39,37 @@ In Azure AD entitlement management, you can see who has requested access package
 
     ![List of requests for an access package](./media/entitlement-management-access-package-requests/requests-list.png)
 
+1. You can click on **Request History details** to see who approved a request, what their approval justifications were, and when access was delivered.
+
+If you have a set of users whose requests are in the "Partially Delivered" or "Failed" state, you can retry those requests by using the [reprocess functionality](entitlement-management-reprocess-access-package-requests.md).
+
+### View assignments with Microsoft Graph
+You can also retrieve requests for an access package using Microsoft Graph.  A user in an appropriate role with an application that has the delegated `EntitlementManagement.Read.All` or `EntitlementManagement.ReadWrite.All` permission can call the API to [list accessPackageAssignmentRequests](/graph/api/accesspackageassignmentrequest-list?view=graph-rest-beta&preserve-view=true). You can supply a filter to indicate a specific access package, such as: `$expand=accessPackage&$filter=accessPackage/id eq '9bbe5f7d-f1e7-4eb1-a586-38cdf6f8b1ea'`. An application that has the application permission `EntitlementManagement.Read.All` or `EntitlementManagement.ReadWrite.All` permission can also use this API.
+
+## Remove request (Preview)
+
+You can also remove a completed request that is no longer needed. To remove a request:
+
+1. In the Azure portal, click **Azure Active Directory** and then click **Identity Governance**.
+
+1. In the left menu, click **Access packages** and then open the access package.
+
+1. Click **Requests**.
+
+1. Find the request you want to remove from the access package.
+
+1. Select the Remove button.
+
+> [!NOTE]
+> If you remove a completed request from an access package, this doesn't remove the active assignment, only the data of the request. So the requestor will continue to have access. If you also need to remove an assignment and the resulting access from that access package, in the left menu, click **Assignments**, locate the assignment, and then [remove the assignment](entitlement-management-access-package-assignments.md).
+
+### Remove a request with Microsoft Graph
+
+You can also remove a request using Microsoft Graph.  A user in an appropriate role with an application that has the delegated `EntitlementManagement.ReadWrite.All` permission, or an application with that application permission, can call the API to [remove an accessPackageAssignmentRequest](/graph/api/accesspackageassignmentrequest-delete?view=graph-rest-beta&preserve-view=true).
+
 ## Next steps
 
+- [Reprocess requests for an access package](entitlement-management-reprocess-access-package-requests.md)
 - [Change request and approval settings for an access package](entitlement-management-access-package-request-policy.md)
 - [View, add, and remove assignments for an access package](entitlement-management-access-package-assignments.md)
 - [Troubleshoot requests](entitlement-management-troubleshoot.md#requests)