Hi,
similar to add access, can we not use workflow to decide approvals on runtime for access removal request?
Using the event trigger below, you can use a workflow to decide the approval chain for access requests during runtime. Let me know if you have any questions about it!
Yes — this is fully supported, and it’s built for exactly this kind of runtime decisioning, similar in spirit to how Manage Access (Add Access) works in a workflow.
The feature is called Adaptive Approvals. You build a workflow using the Access Request Submitted trigger, then add the Approval Policy (or Generic Approval Policy) action to dynamically determine reviewers — Identity, Manager, Access Item Owner, or Governance Group — and even auto-approve based on conditions in your workflow logic (e.g., checking if the requester already has a related entitlement). Reference: Adaptive Approvals Overview
Two things worth knowing before you build it:
- In the Access Request configuration for the role/access profile/entitlement, set Approval Type = Workflow, and point it at this workflow — otherwise the trigger won’t fire for that request. See this related community thread for common setup confusion: Clarification Needed on Multi-Level Access Request Approval Using Workflow
- If you need to route to an approver outside what Adaptive Approvals natively supports (e.g., fully custom external logic), there’s also the Access Request Dynamic Approval external trigger, which lets an outside system inject one additional approver into the chain at runtime: Access Request Dynamic Approval
@Gopi2000 Does Adaptive Approval workflow supported to decide approvals on runtime for access removal request?