n8n Workflow: Privileged Access Requests via ServiceNow, Slack & Gmail

Automate privileged access approvals end-to-end with n8n, ServiceNow, Slack, and Gmail

This n8n workflow receives privileged access requests through a webhook, creates a tracking request in ServiceNow, routes approvals through Slack (manager, then security), and notifies the requester via Gmail—including access expiry details and final outcome.

What this workflow does

• Receives a webhook POST with requesterEmail, requestedRole, targetSystem, businessJustification, and durationDays.
• Validates the payload (required fields present, email format valid, and durationDays between 1 and 90). If validation fails, it returns a 400 JSON error.
• Creates an sc_req_item in ServiceNow, calculating submission metadata and a projected access expiry date. If ServiceNow record creation fails, it returns a 502 JSON error.
• Returns a 202 acknowledgment immediately to the caller, while logging the request to a Slack compliance/audit channel.
• Runs sequential Slack approvals: first requests approval from the manager, then (only if approved) requests approval from the security channel.
• Updates ServiceNow and notifies stakeholders:
  • If both approvals are granted, the workflow updates the ServiceNow request item as approved, sends the requester an email via Gmail (including the expiry date), and posts confirmation to the security Slack channel.
  • If either approval is denied, it updates the ServiceNow request item as denied, records the outcome, and communicates the result as part of the Slack audit trail.

Use cases

• Privileged role requests for internal tools or SaaS systems that require auditable approval chains.
• Standardizing ServiceNow tracking for access governance requests submitted by employees or admins.
• Reducing manual follow-ups by emailing requesters via Gmail only after approvals complete.

Technical details

• Webhook (POST) intake + early 400/502 validation/error responses
• if, set, no op for control flow and data handling
• ServiceNow record creation for sc_req_item and approval outcome updates
• Slack compliance/audit logging and two-step approval (manager → security)
• Gmail notification to the requester with the access expiry date