Level 2 Approver can't approve account, only entitlement

[IAM]

Hello. Screenshot below of my workflow but what I'm seeing is the manager gets prompted to approve the account and the entitlement but the level 2 approver, the entitlement owner, only gets the option to approve the entitlement only and not the account.

The issue this has caused is that the manager approves the account and entitlement, the level 2 approver rejects the entitlement, Saviynt will provision an account without access because the account has been approved by manager. I want both the account and entitlement to go to the level 2 approver that way an account is not created at all. How can I achieve this?

[rushikeshvartak]

Use entitlementsOnly under security system - create task action