Hello Everyone,

I am trying to brainstorm here to come up with more efficient way to solve a used case. Let me briefly explain the used case first:

This is for AP Automation where AP Team sends out an invoice to the approver and they will then make their decision and send it back to AP Team. Often there are requests from AP Team to IT to add new approvers to the AD Group and set up the access rights so that this new approver can only see his own folder. Its a hassle for IT Admins to manage this as it happens very frequently.

So I am trying to come up with a way where we can either make AP team Self sufficient so that they can handle adding and removing of users (without giving them access to the AD Groups). OR Come up with an automated way to handle this.

My thought:

I am thinking of creating a LF Form that will capture the Last Name and First Name of the New Approver, this new approver information will then be passed on to a WF where I can add user as a trustee and assign it and appropriate group with required access rights to his folder. My dilemma is how do I remove one of the existing license and replace it with this new license? Is there an automated way of handling that? or this has to be done in admin console manually?

Any suggestions or inputs are appreciated!

Thank you!

Best,

Himanshu