group request template

Group membership request form template

A group membership request form template for Microsoft 365, Entra ID, MSP, and n8n workflows with approval and expiration controls.

Direct answer

A group membership request form template should collect requester, target user, customer or department, requested group, add/remove action, business justification, expiration date, approver, approval decision, ticket context, and tenant mapping before n8n changes group membership.

Best for

Use this template when the form is part of an operational workflow.

  • IT teams replacing email-based Microsoft 365 or Entra ID group requests.
  • MSPs collecting customer-approved access changes through a portal.
  • n8n workflows that need stable user and group IDs before changing access.
Dynamic sources

Typical systems this template may need to read before n8n fulfills the request:

n8nMicrosoft 365Entra IDCIPPConnectWiseHaloPSAIAM tools
Field structure

Fields this form should include

FieldPurpose
RequesterTracks who asked for the group change and where updates should go.
Customer or departmentScopes users, groups, approvers, and tenant mappings.
Target userIdentifies who should receive or lose group membership.
Requested groupLoads eligible security, Microsoft 365, distribution, or application groups.
Action and expirationCaptures add, remove, temporary add, renewal, and cleanup timing.
Justification and approvalDocuments why access is needed and who approved it.
Approval notes

Require approval for privileged, sensitive, customer-visible, temporary, or externally shared group memberships. Use expiration dates for temporary access.

Webhook notes

Send n8n stable target user IDs, group IDs, action, expiration date, justification, approval result, tenant context, ticket ID, and idempotency key.

Implementation order

Build the form first, then wire the workflow.

Define eligible group catalogs

Decide which groups are requestable and hide groups that should never be self-service.

Load users and groups dynamically

Use read-only webhooks for tenant-specific users, groups, approvers, and policy metadata.

Add approval and expiration

Collect business justification, approver decision, and temporary-access timing before fulfillment.

Fulfill after approval

Send the approved payload to n8n, CIPP, Microsoft Graph, PowerShell, IAM, or a ticketing workflow.