Introduce the ability to configure a delegated requester group on a product. Members of this group should be able to submit requests for that product through the Managed Products functionality.

This would allow designated users to request access for other users without giving them approval permissions. The delegated requester should only be able to submit requests and should not be able to approve them.

Currently, the resource owner group is responsible for managing and approving access for a product. However, in some scenarios it is desirable that certain users can submit requests for a product without being responsible for approving them.

Requested Enhancement

Allow administrators to configure a delegated requester group on a product. Members of this group should be able to submit requests for that product through Managed Products for other users.

This permission should only allow submitting requests and should not grant approval rights.

It is important to clearly distinguish this functionality from the resource owner group. Resource owners are responsible for managing and approving access to a product, while delegated requesters should only be able to submit requests for that product.

This configuration should also be manageable through the HelloID API so that delegated requester assignments can be automated.

Example Scenario

A service desk team is responsible for submitting access requests for users. Instead of making the service desk part of the resource owner group, a delegated requester group could be configured on the product.

Members of this group could then submit requests for users through Managed Products without being able to approve the requests.

Business Value

This improvement would provide more flexibility in request delegation and better reflect real organizational processes where certain teams, such as service desks, are responsible for submitting requests while product owners remain responsible for approvals. It also enables automation and integration through the HelloID API for managing delegated requester configurations.