Transfer workflow - trigger and activate campaign for only tagged access items

[Shonnegowda (Seemarani Honnegowda)]

We’ve a transfer workflow, which will create a campaign and activate it whenever there is change in identity attributes. We just need to send only the user critical access items not all the access user is having for the review(We are identifying the access items via tags:tag1). I’ve used Search query action in workflow step, its giving the expected result in that step, but when we pass that onto create a campaign, it considers all the user access.

Do we have any alternate design and solution for this?

[sunnyajmera]

Could I take a look at your workflow? I’m uncertain if it’s possible to accomplish this in a single workflow. It might be necessary to first identify the entitlements with those tags for the user and then pass that information to the create certification process with those items.