This article is relevant to excluding AD attributes such as 'Title' where using an include is unsuitable
Do I have to use the "Include" condition in a workflow for the appropriate attribute? Or is there a way to exclude instead of include on using the AD attributes?
The conditions specified under the approval workflows are limited to "Include" conditions. A work order has been submitted to engineering to provide support for exclude conditions in the approval workflows. This is due to be implemented in App Portal 2016.
It is possible to exclude conditions for approval at the Catalog Item level, but this would have to be done for every Catalog Item that uses that approval workflow.
A possible workaround could be to create an SCCM collection that excludes those AD attributes and then use that SCCM collection as an include in the approval condition.