Hi Sabrina,
Technically only provisioned roles details will be present in %PROVISIONING% variable. If you want to send the user details about rejected roles you should handle it with APPROVED or REJECTED notifications at role owner stage.
Again the issue is at role owner stage, if you are rejecting any role and since it is rejection at LineItem level, REJECTION notification will not work and you should use APPROVED notification as per your requirement.
Check below notes for role rejection:
2007048 - ARQ: REJECT notifications not being sent out
1849378 - GRC-10.0- MSMP, rejection notification is not getting triggered in case of 'System and Role' setting at Stage level
1960393 - No detailed user notification for the rejected roles
Regards,
Madhu.