Is there a way to make a governance group an entitlement owner instead of a single identity? We are leveraging the SailPoint/ServiceNow Catalog Connector. When a user submits a request via the serviceNow Catalog it is looking up the the entitlement owner in sailpoint for the approval workflow. We would like to transition from a single owner to a governance group as the entitlement owner.
Hello Dedrick,
As far as Im aware you can’t set Entitlement Owner to a governance group, however you can of course set the approval flow of the entitlement to be governance group still.
Appreciate the input Sebastian, that would work if we were using access requests in SailPoint. But we are using the ServiceNow Catalog connector. Sounds like I might need to look into adding this to the idea portal.
Hi @dedricktaig
Like @Wegmannorth already mentioned, this is not possible with entitlements as they only support an Identity object assigned to the owner field.
Since you’re using the SNOW catalog connector, my only suggestion/workaround would be that you could populate the governance group in a metadata attribute for the entitlement then have SNOW use that metadata attribute to populate the approvers. This is not out the box functionality and would need to be custom in your snow tenant, but I’ve seen it done in the past.
If you need this OOTB, I would open an idea. Although in my partner tenant, I am seeing an additional owners field option being tested, so it may be coming sooner than anticipated:
You mean like this?
Yes! Once I saw SNOW mentioned, I should’ve just tagged you @mcheek ![]()
@dedricktaig my approach leverages tagging on the entitlements so it’s not super sophisticated, but you can always instead put the governance group on the approval config of the entitlement and leverage the get-entitlement-request-config API endpoint instead of the search endpoint my script uses. Same process after that - enumerate the governance group members, look them up in servicenow, then return them
