# Escalation to work group for access request

**URL:** <https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq, provisioning, access-requests\
**Created:** [August 21, 2023, 4:39am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325 "2023-08-21T04:39:23Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![naveenkrishna7382](https://avatars.discourse-cdn.com/v4/letter/n/bc8723/32.png) [@naveenkrishna7382](https://developer.sailpoint.com/discuss/u/naveenkrishna7382)\
**Post date:** [August 21, 2023, 4:39am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/1 "2023-08-21T04:39:23Z")

</div>

we have a scenario like whenever an access request is raised the first remainder should trigger at 24 hrs and next remainder at 72 hrs . After this if the access request is still not approved or rejected, we need to escalate the work item to the operations workgroup. We have configured remainders in provisioning approval sub process. We also created an escalation rule as return “operations” in the provisioning approval sub process. But after the second remainder instead of escalation to the workgroup the access request is getting expired. Can anyone please provide a solution over this and if any sample escalation rules also help us.  
Note: we have also provided the escalation style as both in provisioning approval subprocess

---

<div class="post-metadata">

**Author:** ![iamksatish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamksatish/32/26217_2.png) [@iamksatish](https://developer.sailpoint.com/discuss/u/iamksatish)\
**Post date:** [August 21, 2023, 5:24am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/2 "2023-08-21T05:24:52Z")

</div>

Can you please provide the escalation Rule you can configured, In the escalation rule if you return null - the work item will be expired, if you want to escalate it to a particular identity or workgroup you have to return the name of the same in your escalation rule

You can have your conditions accordingly within the rule.

---

<div class="post-metadata">

**Author:** ![naveenkrishna7382](https://avatars.discourse-cdn.com/v4/letter/n/bc8723/32.png) [@naveenkrishna7382](https://developer.sailpoint.com/discuss/u/naveenkrishna7382)\
**Post date:** [August 21, 2023, 5:41am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/3 "2023-08-21T05:41:35Z")

</div>

I have hardcoded the workgroup name in the rule as return “operations”;. This is the single line of code that I have wrote and I have added the rule in set up → business process–\> provisioning approval sub process–\> workitem escalation rule variable–\> selected the rule and added the code there. When I see the type of the rule it become type as workflow rule not escalation rule. Can u please help me to know is that the correct place to add the escalation rule or is anything I am missing?

---

<div class="post-metadata">

**Author:** ![iamksatish](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/iamksatish/32/26217_2.png) [@iamksatish](https://developer.sailpoint.com/discuss/u/iamksatish)\
**Post date:** [August 21, 2023, 6:25am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/4 "2023-08-21T06:25:19Z")

</div>

Have you mapped this variable as reference in the Approval step of the same sub-process for the argument - workItemEscalationRule

Can you share the Sub-Process xml completely if possible.

---

<div class="post-metadata">

**Author:** ![naveenkrishna8211](https://avatars.discourse-cdn.com/v4/letter/n/858c86/32.png) [@naveenkrishna8211](https://developer.sailpoint.com/discuss/u/naveenkrishna8211)\
**Post date:** [August 21, 2023, 6:48am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/5 "2023-08-21T06:48:56Z")

</div>

Please find workflow attachments

[cent Provisioning Approval Subprocess.xml](https://developer.sailpoint.com/discuss/uploads/short-url/psU22290intz141FZrXf3mflR3J.xml) (20.5 KB)

---

<div class="post-metadata">

**Author:** ![naveenkrishna8211](https://avatars.discourse-cdn.com/v4/letter/n/858c86/32.png) [@naveenkrishna8211](https://developer.sailpoint.com/discuss/u/naveenkrishna8211)\
**Post date:** [August 21, 2023, 6:49am UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/6 "2023-08-21T06:49:37Z")

</div>

Also find the rule here

 ![workitem escalation rule](https://global.discourse-cdn.com/sailpoint/original/2X/0/0f1ff2d3bb3165a834a120c4baab2195264f5102.png)

---

<div class="post-metadata">

**Author:** ![Jarin\_James](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jarin_james/32/3372_2.png) [@Jarin\_James](https://developer.sailpoint.com/discuss/u/Jarin_James)\
**Post date:** [August 21, 2023, 12:08pm UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/7 "2023-08-21T12:08:50Z")

</div>

Hi @naveenkrishna8211

There are couple of things I noticed,

- The RuleType for escalation rule is Escalation and not Workflow.
- The workflow variable workItemEscalationRule is initialised with _rule:access request escalation rule_. My understanding is that this variable will be having the value returned from rule instead of the rule. The argument workItemEscalationRule in Approval step is expecting the rule not the identity name.

Try changing the `<Arg name="workItemEscalationRule" value="ref:workItemEscalationRule"/>` to

```auto
<Arg name="workItemEscalationRule" value="access request escalation rule"/>

```

And make sure to change the rule type to Escalation which will be having the argument **newOwner** which is of the type String.

---

<div class="post-metadata">

**Author:** ![naveenkrishna7382](https://avatars.discourse-cdn.com/v4/letter/n/bc8723/32.png) [@naveenkrishna7382](https://developer.sailpoint.com/discuss/u/naveenkrishna7382)\
**Post date:** [August 21, 2023, 12:25pm UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/8 "2023-08-21T12:25:59Z")

</div>

Hi @Jarin_James

Thanks for the reply. The solution worked

---

<div class="post-metadata">

**Author:** ![Jarin\_James](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jarin_james/32/3372_2.png) [@Jarin\_James](https://developer.sailpoint.com/discuss/u/Jarin_James)\
**Post date:** [August 21, 2023, 12:29pm UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/9 "2023-08-21T12:29:08Z")

</div>

Happy to help 😀  
Please mark the response as solution, it will help others looking for solution for similar issues.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [October 20, 2023, 12:29pm UTC](https://developer.sailpoint.com/discuss/t/escalation-to-work-group-for-access-request/16325/10 "2023-10-20T12:29:46Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
