Hi, I created a AD machine account through the UI and also using the APIs.
After adding a requestable entitlement in the creation process, I do not see the entitlement listed on the AD account.
@faye_jacobs1 When filling out the Machine Account Creation form, click Continue. The next page should display the available entitlements for selection.
If you do not see the entitlement listed, check the following:
- The entitlement is marked as Requestable.
- Navigate to Admin → System Settings → Access Requests and ensure the Enable Entitlement Requests option is set to True.
If both settings are correct and the entitlement is still not displayed, review the entitlement configuration and any applicable requestability filters or access request policies.
Hello Faye. Since the entitlement was selectable and included in the request, requestability is likely not the issue. Please check the access request status and confirm whether the group membership was added in AD.
If it exists in AD, re-aggregate the account. If the request completed successfully but the membership is missing in AD, I suggest opening a Support case with the request ID.
The entitlement that I wanted to add was displayed and selectable.
We can see in the group listed on the ‘Details’ page of the request.
We aggregated the account after creation and confirmed that the account was not added in AD.
We also do not see the Machine Identity list on the entitlement “Identities” list page.
Thanks for confirming. The entitlement follows its own approval flow, so please verify its individual approval status. If it was approved and completed but the account was not added to the AD group, this appears to be a provisioning issue.