# Adding ad groups from ticketing tool

**URL:** <https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011>\
**Category:** SHF Discussion and Questions\
**Tags:** apis, identity-security-cloud, provisioning\
**Created:** [April 17, 2024, 7:43am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011 "2024-04-17T07:43:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![schattopadhy](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/schattopadhy/32/8854_2.png) [@schattopadhy](https://developer.sailpoint.com/discuss/u/schattopadhy)\
**Post date:** [April 17, 2024, 7:43am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011/1 "2024-04-17T07:43:07Z")

</div>

Hi All,

Is there any approach which we can take for the below use case:

End user creates a ticket in ticketing tool to get access to Active Directory groups and SailPoint automatically add the ad group in AD

Thanks  
Shantanu

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [April 17, 2024, 7:54am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011/2 "2024-04-17T07:54:02Z")

</div>

Hi @schattopadhy,

You can let the ticketing tool call the IDN API’s for create access request when the ticket is submitted/approved.

Request can be made for either an entitlement (which would be sticky) or for an access profile. That way, you will have the audit records in IDN.

> **[create-access-request | SailPoint Developer Community](https://developer.sailpoint.com/docs/api/v3/create-access-request)**
>
> Submit an Access Request

The catch here is that there are no API’s currently to get the status of an access request.

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [April 17, 2024, 7:55am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011/3 "2024-04-17T07:55:17Z")

</div>

Hey there Shantanu,

What kind of ITSM integration are you using?

The only logical solution that I can think of right now is to configure a workflow with the external trigger that the ticketing service can call. Then you could add the access automatically via the workflow.

I guess the best solution, however, is to on-board the ability to request as much as possible directly via IdentityNow. How come you need ITSM for AD groups?

---

<div class="post-metadata">

**Author:** ![schattopadhy](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/schattopadhy/32/8854_2.png) [@schattopadhy](https://developer.sailpoint.com/discuss/u/schattopadhy)\
**Post date:** [April 17, 2024, 8:51am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011/4 "2024-04-17T08:51:14Z")

</div>

@Wegmannorth we use cherwell as for end users they want access to groups and the front end portal is ticketing solution not sailpoint

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 16, 2024, 8:51am UTC](https://developer.sailpoint.com/discuss/t/adding-ad-groups-from-ticketing-tool/51011/5 "2024-06-16T08:51:25Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.