Approval workflow for EBS responsibilties and AD Groups

Question

Hi,
I need to trigger a workflow when user makes a self-service request for EBS responsibilities & AD groups.
Since, "Add responsibility" and "Add user to Group" are process tasks, how can we attach a workflow to process task? or we can acheive this by some other means.
Note that, system is already in place & users are already provisioned to AD & EBS, so, we cant go with solution of creating RO for either AD Groups or EBS responsibilty.
Thanks,
Raghu

Answer 1

Assuming your user can have only one Account for the target, then all you need on your request is the name of the group you want to add.
On your custom object, the request should only list the groups the user is requesting. If you want a single group per request, place the groups looking on the parent object form. If you want multiple groups per request, you will create a child table with the groups on it.
When the request process and approval is completed, your "Create User" code for this object or instead "Provision Groups" task which is unconditional, your code should search through the user's existing resource objects to find the valid one for their account in this target. Once the object is found, grab the process instance key, and using the APIs, add the group entries to the child table of the parent object. When the entries are inserted into the account object's child table, the "Insert" tasks will trigger. The adding of the child table entries will allow you to not make any modifications to your existing parent object because it will use all of it's current configurations to provision those new groups to the user account.
Step 1. Request is made for new groups.
Step 2. Approval is performed.
Step 3. Provisioning steps for new object searches for user's account resource instance and adds the new groups to that objects child table
Step 4. Insert tasks are triggered which will provision the new groups for the User.
All done.
-Kevin