# AD Application Access Request - Non Role Based

**URL:** <https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, provisioning, roles\
**Created:** [December 9, 2024, 7:53pm UTC](https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813 "2024-12-09T19:53:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![chrisk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/chrisk/32/34678_2.png) [@chrisk](https://developer.sailpoint.com/discuss/u/chrisk)\
**Post date:** [December 9, 2024, 7:53pm UTC](https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813/1 "2024-12-09T19:53:03Z")

</div>

We are on IIQ 8.3

Is there a way to request an AD Account other than using Roles? Like simply request Application account somehow?  
We have been using Roles, but are about to onboard a few hundred AD Domains and were looking/hoping for something a bit quicker/simpler.

Thanks for any tips!

---

<div class="post-metadata">

**Author:** ![enistriminsait](https://avatars.discourse-cdn.com/v4/letter/e/58f4c7/32.png) [@enistriminsait](https://developer.sailpoint.com/discuss/u/enistriminsait)\
**Post date:** [December 9, 2024, 8:26pm UTC](https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813/2 "2024-12-09T20:26:47Z")

</div>

Hi @chrisk,

yes you can request an account from **Manage Account** page:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/d/0/d086def637e322d5a619d1a3295de2e887425d4e.png)  
select an identity and you can click on **Request Account** on the right and request a new account.

to enable this button, you need to have almost one application on this selection on Lifecycle Manager\*:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/6/8/689fa8b6adeb3d9115b5fa447ad1a76300369df7.png)

\*you can also configure it from debug adding `ADDITIONAL_ACCOUNT_REQUEST` on feature string on application.

If you want give the capability on population\workgroups\users you need mark the **Allow requesting new accounts** flag on Manage Account Option on relative quicklink population:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/9/5/959d12f10614e0d394166d8e6af9763bf5bf61a5.png)

---

<div class="post-metadata">

**Author:** ![chrisk](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/chrisk/32/34678_2.png) [@chrisk](https://developer.sailpoint.com/discuss/u/chrisk)\
**Post date:** [December 9, 2024, 9:23pm UTC](https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813/3 "2024-12-09T21:23:59Z")

</div>

That is great news! I’m still trying to get it to work, but super excited about the possibility!

Thanks for your time and great response, truly appreciated!

EDIT: Got it to work! I think I had to add **ACCOUNT\_ONLY\_REQUEST** to the feature string in the Application. After doing that, the button was then accessible.

Thanks again!  
Chris

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [February 7, 2025, 9:24pm UTC](https://developer.sailpoint.com/discuss/t/ad-application-access-request-non-role-based/92813/4 "2025-02-07T21:24:13Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.