Provision Okta admin roles via Opal from BambooHR hires
Build a scheduled workflow that pulls recent BambooHR hires flagged for an Okta admin role (modeled as an Opal resource). For each, request access via Opal so the pre-configured approval flow runs, and document the request and outcome in a Jira issue. Optionally expose a page to create the BambooHR user. Handle already-provisioned users, approval denials, and API errors. Output the access requests raised and their Jira records.
What this prompt builds
Grant new hires their Okta admin role through Opal's approval flow, sourced from BambooHR and tracked in Jira.
The problem
Privileged Okta admin roles are often granted directly and informally, bypassing access-governance approvals and leaving no record. That's exactly the access auditors scrutinize hardest.
Solution and impact
This workflow reads new BambooHR hires needing an Okta admin role and requests it through Opal, triggering the configured approval flow, with the whole process documented in Jira. Privileged access is granted with governance and an audit trail instead of a manual shortcut.