I had scenario where I wanted to provision the business role but not provision entitlements to the target system. This can be done very easily by setting argument noRoleExpansion to true while compiling the provisioning plan.
In a workflow,
<Step action="call:compileProvisioningProject" icon="Task" name="Compile Project" posX="121" posY="15" resultVariable="project">
<Arg name="identityName" value="ref:identityName"/>
<Arg name="plan" value="ref:plan"/>
...
<Arg name="noRoleExpansion " value="true"/>
...
</Step>
In a rule,
Provisioner prov = new Provisioner(context);
prov.setNoRoleExpansion(true);
ProvisioningProject proj = prov.compile(plan);