Skip to main content
All CollectionsTemplatesIntermediate
Just-in-time access to Group Membership in Entra ID by TEAMS - Workflow Template
Just-in-time access to Group Membership in Entra ID by TEAMS - Workflow Template

Triggers on a Teams command where a user asks for temporary access to applications based on group membership via Entra ID with approval.

Updated over a week ago

This workflow facilitates just-in-time (JIT) group membership access requests in Entra ID through Microsoft Teams. Upon user command, it determines groups a user can access, prompts the selection of a group, and the access duration. Once approved in a designated Teams channel, the user is temporarily added to the group, and removed post-duration, maintaining strict access control and minimizing security risks.

Trigger

Microsoft Teams Bot

Use Cases

Identity and Access Management

Workflow Breakdown

  1. Receive a Teams command to trigger a temporary access request

  2. Pull groups that the user has access to and compare to JIT groups setup in the variable

  3. Ask user which group they would like access to and for how long

  4. Send access approval request to a Teams channel of approvers with details

  5. If access is approved, add user to the group in Entra ID, wait and then remove the user from the group

  6. If access is rejected or request times out, notify user about verdict

Vendors

Utils, Microsoft Azure AD, Microsoft 365, Microsoft Teams Bot

Tips

  • Configure Teams channel and Entra ID groups in the "Workflow Context" variable step.

  • Pick a Teams command to use, this example uses JIT-Request to call the workflow.

Did this answer your question?