Before
IAM or support staff manually reviewed each assignment ticket for completeness, looked up the application and groups, and checked whether the application owner had provided matching approval evidence. They then followed up on missing details or performed the group assignments after the request passed review.
How it works
- Check the ticket for the application, groups, owner evidence, and other required assignment information.
- Validate the application and groups, confirm that the owner evidence matches, and route incomplete or unapproved requests back for clarification.
- Assign each eligible group to the validated application and return the assignment results.
Workflow details
- Request validation: The flow receives an application assignment ticket and checks whether the application name, groups, owner validation information, and other required assignment details are available.
- Information follow-up: When required details are missing, it updates the ticket with a request for additional information rather than continuing with an incomplete request.
- Application and group checks: When the request is complete, it reviews the application, verifies the requested groups, determines whether they are already assigned, and compares the owner evidence in the ticket with the application owner information.
- Exception handling: If the application or groups cannot be found, or owner validation is not confirmed, the ticket is updated with the relevant issue or approval request.
- Approved assignment: When the application, groups, and owner evidence pass validation, the workflow processes each eligible group and assigns it to the application, returning the assigned groups as its result.
What changed
Ticket completeness, application existence, group eligibility, existing assignments, and owner validation are checked in one workflow before provisioning. Requests with issues are routed back through the ticket, while validated requests proceed directly to group assignment.
Work removed
Reviewing assignment tickets for missing fields, looking up applications and groups, checking existing group assignments, comparing owner evidence, copying follow-up comments into tickets, and manually assigning each approved group.
Expected outcome
Fewer incomplete or unapproved assignment requests reach provisioning, with eligible groups assigned through a consistent validation path.
