Modern security operations cannot fully automate high risk actions without human validation. Critical approvals such as access elevation, incident containment, SaaS provisioning, and financial authorizations require human oversight before execution.
This n8n workflow creates a human approval pipeline using Telegram interactive approvals.
Problem
AI driven security automation pipelines often need:
- human validation checkpoints
- approval and rejection routing
- auditable decision workflows
- real time escalation notifications
- operational status tracking
- privileged actions may execute automatically
- incident responses can become risky
- governance requirements fail
- auditability becomes fragmented
Solution
This implementation uses TWO independent n8n workflows:
Workflow 1
Creates and sends approval requests.Workflow 2
Listens for Telegram approval or rejection actions and updates request status.Workflow Architecture
Workflow 1
Trigger → Create Approval Request → Store Pending Status → Telegram Approval MessageWorkflow 2
Telegram Trigger → Capture Decision → IF Approval Check → Update Status → Final NotificationExample Request
json
{
"requestId": "REQ-1001",
"type": "Privileged Access Request",
"employee": "Alex Morgan",
"riskScore": 185,
"reason": "Temporary SOC escalation access"
}
Telegram Approval Message
text
Approval Request
ID: REQ-1001
Type: Privileged Access Request
Employee: Alex Morgan
Risk Score: 185
Reason: Temporary SOC escalation access
Approve or reject this request.
Use Cases
- SOAR approval pipelines
- Privileged access approvals
- AI assisted SOC workflows
- Security exception handling
- Human validated automation
- GRC operational approvals
Impact
Adds human oversight into AI automation pipelines. Improves auditability of security decisions. Prevents unauthorized automated actions. Creates scalable human approval gates for cyber operations.
Kunsh Tanwar | ETXcyberops | [email protected]