Workflow using Access request submitted and approval policy

I am trying to implement a workflow for a few ad group entitlements auto cancellation which have some criteria. As I am using access request submitted,in the workflow approval policy action is also expected to be added but this particular workflow I am creating using access rquest submitted is only for the cancellation.

Can anyone tell me is there a way we can use the workflow with the trigger i mentioned without using approval policy?

TIA

Hey @kanusha9

Yes, you can use Access Request Submitted as the trigger and skip the approval policy action. Just add a condition and a revoke action—the workflow will auto‑cancel entitlements without human approval.

Thanks,
Shantha

Hello Anusha, can you clarify what you mean by “auto cancellation” here? Are you trying to auto deny the submitted access request before provisioning, or revoke access the user already has?

Yes As soon as the request is submitted it should be denied by checking the criteria. I will have to use the access request submitted trigger but without approval policy it is throwing error approval is not required in this workflow

Got it. Yeah, I don’t think we can skip the Approval Policy action when the workflow is set as the Approval Type on an access item. Can we try keeping the Approval Policy action in the workflow, and add an operator right after the Access Request Submitted trigger to evaluate your criteria?

Branch the workflow from there:

  • If criteria fail, route to a Deny Access Request action

  • If criteria pass, route to the Approval Policy action with your normal reviewer

Approval flow is not required then why to use approval policy. there must be a way to do that’s why I am checking in the community

Hi @kanusha9 , if you use the access request submitted trigger, definitely that workflow requires approval policy action, in the workflow itself you have to set some criteria and do auto cancellation, without these steps, workflow will throw validation errors and cannot be saved/enabled.