Trigger alert when multiple access getting revoked from Role

[trettkowski (Tyler Rettkowski)]

Hi @shikhadeliveroo

There’s no native way to handle this, but you can use customization through the API’s to make this happen. I think it would be relatively simple to just scan the most recent AccountRequests, check for commonality between them, then if it hits your criteria, send an email to your team.

Here is another thread discussing something similar to your needs:

Can there be a threshold check while assignment or removal of role?

“Can there be”…yes. Somewhat of a custom job. For the roles that you want to ‘protect’ with a threshold, specify a dummy approver. With a periodic workflow / script, get a list of approved access requests with this particular role assigned in the last, say, 24 hours. If the count is greater than 100, deny the approval request. If the count is less than 100, approve the pending approval request. (Handle the pending approval request in a sorted order) e.g. Get-V2024AccessRequestStatus with …