How a workflow is built
Every workflow is made up of the same building blocks:- Trigger - when the workflow runs, for example on a daily schedule.
- Condition - a query step that finds the accounts, resources, or identities matching a set of filters, for example accounts inactive for more than 90 days.
- Approval - an optional human-in-the-loop step before the action runs. Depending on the workflow, this can be a direct approval (routed to a manager or owner, with an alternate approver and a defined deny behavior), a time-based escalation, or a reviewer sign-off.
- Action - what the workflow does once conditions and approvals are met, for example disabling an account.

