I am trying to implement a workflow for a few ad group entitlements auto cancellation which have some criteria. As I am using access request submitted,in the workflow approval policy action is also expected to be added but this particular workflow I am creating using access rquest submitted is only for the cancellation.
Can anyone tell me is there a way we can use the workflow with the trigger i mentioned without using approval policy?
Yes, you can use Access Request Submitted as the trigger and skip the approval policy action. Just add a condition and a revoke action—the workflow will auto‑cancel entitlements without human approval.
Hello Anusha, can you clarify what you mean by “auto cancellation” here? Are you trying to auto deny the submitted access request before provisioning, or revoke access the user already has?
Yes As soon as the request is submitted it should be denied by checking the criteria. I will have to use the access request submitted trigger but without approval policy it is throwing error approval is not required in this workflow
Got it. Yeah, I don’t think we can skip the Approval Policy action when the workflow is set as the Approval Type on an access item. Can we try keeping the Approval Policy action in the workflow, and add an operator right after the Access Request Submitted trigger to evaluate your criteria?
Branch the workflow from there:
If criteria fail, route to a Deny Access Request action
If criteria pass, route to the Approval Policy action with your normal reviewer
Hi @kanusha9 , if you use the access request submitted trigger, definitely that workflow requires approval policy action, in the workflow itself you have to set some criteria and do auto cancellation, without these steps, workflow will throw validation errors and cannot be saved/enabled.