# Access request and approval workitem creation **URL:** \ **Category:** IIQ Discussion and Questions\ **Tags:** identityiq, workflows, access-requests\ **Created:** [April 16, 2024, 5:22pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896 "2024-04-16T17:22:39Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![ravnekka](https://avatars.discourse-cdn.com/v4/letter/r/dec6dc/32.png) [@ravnekka](https://developer.sailpoint.com/discuss/u/ravnekka)\ **Post date:** [April 16, 2024, 5:22pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/1 "2024-04-16T17:22:39Z")
### Which IIQ version are you inquiring about? Version 8.2 ### Share all details related to your problem, including any error messages you may have received. Hi, I’m trying to create an account and send it for an approval(workgroup). How can i leverage out of box workflows to create the identity request for the account creation and also an approval workitem with owner as a workgroup. ---
**Author:** ![ajmerasunny1](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@ajmerasunny1](https://developer.sailpoint.com/discuss/u/ajmerasunny1)\ **Post date:** [April 16, 2024, 5:34pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/2 "2024-04-16T17:34:33Z")
I would suggest going through the documentation, [Lifecycle Manager Workflows - Compass (sailpoint.com)](https://community.sailpoint.com/t5/Technical-White-Papers/Lifecycle-Manager-Workflows/ta-p/71301) and look for approvalscheme as identity. You can leverage roles for account creation or update the provisioning plan to include account creation. ---
**Author:** ![kjakubiak](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/kjakubiak/32/7052_2.png) [@kjakubiak](https://developer.sailpoint.com/discuss/u/kjakubiak)\ **Post date:** [April 16, 2024, 5:45pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/3 "2024-04-16T17:45:08Z")
Easiest way Go to process designer, fins workflow called LCM Provisioning and set variable approvalSchema to manager if you want manager approval, owner if you want owner approval, identity if you want certain identity to apprpve request. Easiest way would be to set approwal schema to owner and than make workgroup you want to approve as owner of the object (Role or ManagedAttribute) There is one major disadvantage of this solution - you set approval schema globaly for all requests. If this is acceptable then this would be the easiest solution. If not you need to go into dynamic approval which would be far more complex solution. ---
**Author:** ![ravnekka](https://avatars.discourse-cdn.com/v4/letter/r/dec6dc/32.png) [@ravnekka](https://developer.sailpoint.com/discuss/u/ravnekka)\ **Post date:** [April 16, 2024, 6:01pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/4 "2024-04-16T18:01:51Z")
Thanks Kamil! This is for an account creation and the application doesn’t have groups. I tried setting the approvalSchema to Identity and added the workgroup object to a list and passed it to approvingIdentities in LCM Provisioning. But got the following error ```auto 2024-04-10T16:52:02,908 ERROR Thread-8472 sailpoint.api.Workflower:4575 - An unexpected error occurred: NullPointerException sailpoint.tools.GeneralException: NullPointerException at sailpoint.server.ScriptletEvaluator.doCall(ScriptletEvaluator.java:149) ~[identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.server.ScriptletEvaluator.evalSource(ScriptletEvaluator.java:63) ~[identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.evalSource(Workflower.java:5910) ~[identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advanceStep(Workflower.java:5149) ~[identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advance(Workflower.java:4536) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.startCase(Workflower.java:3122) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launchSubcase(Workflower.java:5452) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launchSubcases(Workflower.java:5345) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advanceStep(Workflower.java:5136) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advance(Workflower.java:4536) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.startCase(Workflower.java:3122) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launchSubcase(Workflower.java:5452) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launchSubcases(Workflower.java:5345) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advanceStep(Workflower.java:5136) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.advance(Workflower.java:4536) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.startCase(Workflower.java:3122) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launchInner(Workflower.java:2791) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launch(Workflower.java:2644) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.api.Workflower.launch(Workflower.java:2478) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.request.WorkflowRequestExecutor.execute(WorkflowRequestExecutor.java:177) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] at sailpoint.request.RequestHandler.run(RequestHandler.java:163) [identityiq.jar:8.2p5 Build dedd9529823-20230427-083919] Caused by: java.lang.NullPointerException 2024-04-10T16:52:02,937 WARN Thread-8472 sailpoint.workflow.IdentityRequestLibrary:848 - Complete requested, but identityRequest was missing. ``` ---
**Author:** ![venus](https://avatars.discourse-cdn.com/v4/letter/v/35a633/32.png) [@venus](https://developer.sailpoint.com/discuss/u/venus)\ **Post date:** [April 16, 2024, 6:25pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/5 "2024-04-16T18:25:54Z")
Hi Ravi, Are you getting this error while generating an access request? ---
**Author:** ![venus](https://avatars.discourse-cdn.com/v4/letter/v/35a633/32.png) [@venus](https://developer.sailpoint.com/discuss/u/venus)\ **Post date:** [April 16, 2024, 6:34pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/6 "2024-04-16T18:34:06Z")
I am using 8.3 IIQ. I tried the same using Business Process UI and it works fine. I have tested until the submission and noticed access request is assigned to the Workgroup for approval. ---
**Author:** ![Muhammad\_Mustafa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/muhammad_mustafa/32/27611_2.png) [@Muhammad\_Mustafa](https://developer.sailpoint.com/discuss/u/Muhammad_Mustafa)\ **Post date:** [April 16, 2024, 6:42pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/7 "2024-04-16T18:42:22Z")
Hi @ravnekka I second that… what Kamil mentioned is the easiest way and will work perfectly, the disadvantage here is that setting the approval schema will be global for all the requests. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [June 15, 2024, 6:43pm UTC](https://developer.sailpoint.com/discuss/t/access-request-and-approval-workitem-creation/50896/8 "2024-06-15T18:43:03Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.