# Approve Access Request Mid-Approval

**URL:** <https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973>\
**Category:** SHF Discussion and Questions\
**Tags:** workflows, identity-security-cloud\
**Created:** [April 3, 2024, 1:43pm UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973 "2024-04-03T13:43:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [April 3, 2024, 1:43pm UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973/1 "2024-04-03T13:43:27Z")

</div>

Hey Team!

I have quite a unique use-case where I need to set up some sort of dynamic approval-workflow.

**Use-case:**

Some access profiles for application XYZ need to go through 2-step approvals (1. Manager 2. Governance Group).

However a handful of specific access profiles connected to XYZ application need to be automatically approved after the 1st manager approval **if the requestedFor of said access contains a certain attribute.** (For example: John Doe requests XYZ access, John Doe is part of HR Department == Automatically approve request after 1st approval).

My first questions is:

- **Is it possible to trigger “Access Request Decision” workflow when request is not fully finished?**

My 2nd questions is:

- **Is there a good way of configuring a workflow for this? The example below shows what I have tried:**

 ![image](https://global.discourse-cdn.com/sailpoint/original/2X/8/892aefb347493837333f8df4f3094853c9508ce5.png)

In my head I was imagining that it was going to be a piece of cake, however, now I have run into some problems.

Firstly, I’m not sure the trigger works for half-finished approvals, secondly the ID needed for **“Approve Access Request”** is _not the same ID that is contained within_ **“Access Request Decision”** , meaning I have to somehow manually fetch the approvalID via another HTTP request, where filtering options are limited making it quite annoying…

Is it even worth configuring a workflow like this or is there perhaps better options out there?

Thank you,  
Seb.

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [April 4, 2024, 7:18am UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973/2 "2024-04-04T07:18:49Z")

</div>

@colin_mckibben Do you by chance have any knowledge to shine on this use-case? :\>

---

<div class="post-metadata">

**Author:** ![KRM7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/krm7/32/2685_2.png) [@KRM7](https://developer.sailpoint.com/discuss/u/KRM7)\
**Post date:** [April 4, 2024, 7:37am UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973/3 "2024-04-04T07:37:15Z")

</div>

You should look into this

> [@Implementing A Request Response Type Trigger in Workflows](https://developer.sailpoint.com/discuss/t/implementing-a-request-response-type-trigger-in-workflows/10216):
>
> At the time of this writing, SailPoint Workflows does not have native support for our [request response type](https://developer.sailpoint.com/docs/extensibility/event-triggers/trigger-types/#request-response) triggers, such as the [Access Request Submitted trigger](https://developer.sailpoint.com/docs/extensibility/event-triggers/triggers/access-request-submitted). However, there is a way to implement request response triggers using the current capabilities of Workflows. This guide will demonstrate how to configure a Workflow that can successfully receive events from the Access Request Submitted trigger as well as respond wi…

---

<div class="post-metadata">

**Author:** ![colin\_mckibben](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/colin_mckibben/32/37182_2.png) [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Post date:** [April 4, 2024, 12:56pm UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973/4 "2024-04-04T12:56:57Z")

</div>

Yes, check out that blog post that Krishna linked to. You can modify it to add one or more forms for out-of-band approvals on an access request.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [June 3, 2024, 12:57pm UTC](https://developer.sailpoint.com/discuss/t/approve-access-request-mid-approval/38973/5 "2024-06-03T12:57:17Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
