We are current trying to support bulk access requests via SN form since ISC does not support via the UI but we are unable to find the a method to support the following.
Has anyone solved this use case?
I know this isn’t a direct answer, but is there a reason why user requests might originate in both systems?
My first question aside, it seems you might be able to use the Access Request Submitted trigger to intercept requests and auto-approve the ones that come from the ServiceNow user, assuming you’re using a separate identity for ServiceNow to submit requests.
You could probably cut down on the noise by putting a filter on it and only intercepting events where the requestedBy identity is the ServiceNow identity.
Happy to share our use case. We frequently receive bulk requests involving a large number of users. In these situations, rather than generating hundreds or even thousands of individual approval tasks, we typically escalate the approval to a senior leader to streamline the process.
Unfortunately, ISC doesn’t currently support this kind of consolidated approval workflow or large-scale bulk requests. That’s why we’re exploring the use of a ServiceNow form/request to better manage bulk submissions. However, we still intend to leverage ISC’s provisioning APIs to automate the fulfillment process once the bulk request is approved.
Based on what I am reading in the linked documentation it will still follow the defined ISC approval path after the interception. “This trigger intercepts newly submitted access requests and allows the subscribing service to perform a preliminary approval/denial before the access request moves to the next approver in the chain.”